In short
There are no accounts, no cookies and no analytics. The verifier keeps nothing from a question.
When an agent asks the verifier
The address is https://mcp.zerotrustphysics.com/mcp.
The verifier reads two things: the question, and the network address it came from.
The question is held in memory while it is answered. The verifier writes no question and no answer to a file or a log.
The network address is counted in memory, so that one address cannot crowd out the others. The count holds how many requests the address may still make and the moment of its last one. An IPv6 address is counted by its first 64 bits. The count is written to no file. It is gone when the service restarts, and sooner if the table of addresses fills.
No dataset is stored. A dataset comes back inside its answer and is held nowhere else.
There is no account, no sign-in and no cookie.
The verifier sees only what an agent sends it. It does not see the conversation the question came from. When an agent asks from inside Claude or ChatGPT on the web, the request arrives from the maker’s servers. An agent on a person’s own machine arrives from that machine’s address.
A cryptographic proof is made from the question and the answer. It holds no name, no network address and no time.
Who carries a request
Cloudflare carries every request to the verifier and serves every page of this site. Cloudflare sees the network address and what is sent, and stops some automated traffic before it arrives. Cloudflare handles what it sees under its own policy: https://www.cloudflare.com/privacypolicy/
The verifier runs on one server rented from DigitalOcean: https://www.digitalocean.com/legal/privacy-policy
This site
zerotrustphysics.com sets no cookie and runs no analytics. It has no forms and no accounts.
The fonts come from Google Fonts. A browser that opens a page asks Google for them, and Google sees that browser’s network address: https://policies.google.com/privacy
The button “Ask the verifier now” sends two questions from the visitor’s own browser to the verifier. They are handled as above.
On some pages Cloudflare adds one small script that shows the email address to a browser.
If a page fails to load, the browser may send Cloudflare a report of the failure.
If you write or call
Mail to kruze@zerotrustphysics.com passes through Cloudflare to a Gmail inbox that John Kruze reads. A message is kept so that it can be answered. It is not sold and not passed to anyone else.
A fault reported on GitHub is public, and GitHub holds it.
What is not collected
No name. No email address, unless you write. No account and no password. No payment details. No cookies. No analytics. No advertising. No record of who asked what.
Your message
To see or delete a message you sent, write to John Kruze.
Changes
When this page changes, the date below changes.
John Kruze, Protocol Company · 13 October 2026