JavaScript is off, so the live parts of this page are not running. Everything written below is complete on its own and says what each computation does and what it produced — the empty rectangles are where it would have run in front of you. Nothing here needs an account, and nothing is hidden behind the scripts; they compute, they do not reveal.

Contact

Get in touch.

Research enquiries, collaboration, official correspondence, or press — pick the right line below.

Ways to reach us

Research, collaboration and press

The quickest line is @KodamaSecLabs on X. For anything longer, write to contact@kodamaseclabs.com.

Official correspondence

Public bodies, regulators and legal notices: oficial@kodamaseclabs.com. The company details are in the Legal Notice.

Errors, bugs and security

A mathematical error, a broken tool or a security issue: report it on Status and you get a reference immediately. Security researchers will also find our security.txt.

One person reads everything that arrives, so replies are not instant, but every message is read. Every claim on this site is meant to be checkable; if something does not hold up, we want to know.

Nothing here is hidden behind a settings toggle that doesn't actually do anything: if it's not in this table, we don't set it.

Name	Type	Set by	Purpose	Duration
`ksec_theme`	localStorage	This site	Remembers your light/dark mode choice	Until you clear it
`ksec_cookie_ack_v1`	localStorage	This site	Remembers you've seen this notice	Until you clear it
`ksec_cookie_choice`	localStorage	This site	Remembers whether you accepted or rejected, so we do not ask again	Until you clear it
`ksec_build_notice_v1`	localStorage	This site	Remembers that you collapsed the build notice in the corner	Until you clear it
`ksec_notice_rev_v1`	localStorage	This site	The site revision you last loaded, so a page left open across a deploy can tell you it is stale	Until you clear it
`ksec_catalog_seen`	localStorage	This site	How many entries the shared catalogue had the last time you looked at it, so the nav can tell you when it has grown and stay quiet when it has not. One number. It says nothing about you — only about how much of a public list you have already seen	Until you clear it
`ksec_findings_seen`	localStorage	This site	The measurements of Life objects this browser has already sent to the shared catalogue, so it does not send the same one twice. A short list of numbers such as `p6:d0-0:n14` — period, displacement, population. It describes what the background drew, not you, and it never leaves your browser: what goes to the catalogue is the pattern itself, and the server measures it there	Until you clear it
`ksec_notebook`	localStorage	This site	The mascot’s research notebook on /mascot: the claims it tested in this browser, the seed, and the verdict, at most 40 entries. Never sent anywhere.	Until you clear it (there is a button on the page)
`ksec_last_visit`	localStorage	This site	When you were last here, so the mascot can tell you the site was rebuilt while you were away — and stay quiet when it was not. A timestamp, nothing else, and it never leaves your browser	Until you clear it
`ksec_tool_uses_…`	localStorage	This site	A per-tool daily-use counter for the free tools, one key per tool (a fair-use nudge, not an enforced limit, never sent anywhere) — set only if you actually use one of those tools	Resets daily; until you clear it
`__cf_bm` and similar	HTTP cookie	Cloudflare, Inc. (our security & CDN provider)	Distinguishes legitimate traffic from automated abuse — the same security gate described in Methodology	Session, typically under 30 minutes

That's the whole list. We don't set analytics, advertising, or tracking cookies of any kind — Accept and Reject in the banner currently do the same thing on this site specifically because there's no non-essential cookie for Reject to actually disable. That's not us dodging the question: under PECR/LSSI-CE, strictly necessary cookies (all we set) are exempt from consent entirely. We show both buttons anyway, and record which one you pressed, because that's the clearer and more honest thing to do even where it isn't strictly required. Full legal detail in Privacy & Cookie Policy.