Ethos

pah.moi is a personal workspace built on a few firm commitments. I am not marketing a website. You can verify each claim.

Your data stays with you

There are no accounts, no advertising analytics and no trackers. Every script the site runs is served from pah.moi itself, including any third-party library bundled into it. Cloudflare injects its own analytics script into pages at the edge, and the site's Content-Security-Policy blocks that script from running, because the policy allows scripts from pah.moi and nowhere else. Cloudflare still sees the requests that reach it, as any platform you transit might do.

Preferences about the site live only in your browser's localStorage; nothing is sent to a pah.moi server, because the 'server' is just static files. There is nothing on the other side to receive it.

Compute is local

The tools run entirely in your browser. A DNS lookup or a JWT you paste is processed on your machine and, where a tool must reach a third party, it says so and talks to that party directly, never through pah.moi. Anything touching sensitive input is gated behind a plain warning first.

Readable without JavaScript

Every page is legible as plain, semantic HTML with no JavaScript. The terminal-style interface is an enhancement layered on top, never a requirement. Turn scripting off and the content is still there.

Verify, don't trust

The guiding line is simple: verify everything; trust patterns, not promises.

Security headers and a strict Content-Security-Policy are applied at the edge, the disclosure contact lives at /.well-known/security.txt, and every element on a page either does something or points at something.

Caveat emptor

You will find a series of MIT-licensed tools, and because this is a static site, you can download any of the pages to run locally or in a sandbox. And you should do so at your own discretion, with no warranty or guarantee. The tools are ultimately designed for my own use, and I offer them to anyone else who is interested. Use at your own risk.