Privacy notice

This is a fictional shop. It exists to study bots and automated attacks for a security research project at the Junction 2026 hackathon. Nothing is sold, and no real accounts exist.

What we collect

For every request to this site we record connection and request data: your IP address and network, the technical details of how your browser or tool connects (TCP, TLS and HTTP settings), request headers, the pages you load and when. We use it to tell real browsers apart from bots and to recognise automated attackers when they return.

What we do not collect

We never store passwords typed into the sign-in form. Comments you post are shown publicly on the product page.

How long we keep it

Raw data for visits that look like ordinary browsing is kept for 24 hours and then reduced to counts. Data about traffic we classify as automated or malicious is kept for the duration of the research project. Where we show attacker data publicly, we show the network and a masked address, never a full IP address.