The honest version. abuz8ai.com is a static site with one data-collecting endpoint, payments handled entirely by Stripe, and no certifications we don't actually hold. Everything on this page is the real posture — nothing inflated.
abuz8ai.com is a static website hosted on Cloudflare Pages, with a small number of Pages Functions behind /api/*. There are no user accounts, no passwords, and no databases of personal information beyond a single waitlist table. The less we collect, the less can go wrong — that is the core of our security model.
Pages are pre-built HTML served from Cloudflare's edge. No server-side sessions, no login surface to attack.
The only thing a visitor can submit is the waitlist form: an email, a product interest, and the source page. Nothing else is collected.
Checkout happens on stripe.com under Stripe's PCI-DSS compliance. Card data never touches our servers.
HTTPS is enforced by Cloudflare on every page and every API route.
One endpoint on this site collects data: POST /api/waitlist. When you join a waitlist, we store your email address, the product you're interested in, and the page you submitted from — in a Cloudflare D1 database (abuz8_waitlist). That is the complete list.
| Third party | What it does here | Honest status |
|---|---|---|
| Google Fonts | Serves the site's typefaces (Playfair Display, Inter, JetBrains Mono). | Loaded on every page. |
| Google AdSense | A script placeholder exists on some pages. | No ads are currently served — there is no active publisher ID. |
| Stripe | Hosted checkout for store purchases. | Only involved when you click Buy; Stripe may set its own cookies per its policies. |
Our browser-based free tools (JSON formatter, regex tester, and the rest of the pure-JS dev tools) run 100% client-side — the data you paste into them stays in your browser.
Every purchase on the store uses a Stripe-hosted checkout link. When you click Buy, you leave our site and enter your card details on stripe.com.
The button is a link to a Stripe-hosted checkout page. No payment form ever renders on our domain.
Card entry, validation, and processing happen on stripe.com under Stripe's PCI-DSS compliance program.
Card numbers are never seen or stored by ABUZ8 — not in transit, not at rest. There is nothing card-related on our servers to breach.
Third-party note: Stripe may set its own cookies during checkout under its own policies — that happens on stripe.com, not here.
abuz8ai.com is hosted on Cloudflare Pages — static pages served from Cloudflare's edge network, plus Pages Functions behind /api/* (public read-only feeds and the waitlist form). TLS/HTTPS is enforced by Cloudflare on all traffic.
These three headers come from the site's _headers file, verbatim:
| Header | Value | What it protects against |
|---|---|---|
| X-Content-Type-Options | nosniff | Stops browsers from MIME-sniffing responses into executable types. |
| X-Frame-Options | SAMEORIGIN | Blocks other sites from embedding our pages in iframes (clickjacking). |
| Referrer-Policy | strict-origin-when-cross-origin | Limits what referrer information leaks to other sites you navigate to. |
GET /api/github-trending — read-only feed of trending GitHub repos, parsed server-side. Collects nothing.GET /api/github-agents — read-only star counts for 20 curated open-source agent projects. Collects nothing.GET /api/polymarket — read-only proxy for public Polymarket market data (powers the paper-trading tester; no real money, no wallet connection). Collects nothing.POST /api/waitlist — the only endpoint that stores data (email + product interest + source → Cloudflare D1).If you find a security issue anywhere on abuz8ai.com or its /api/* functions, we genuinely want to hear about it.
Send a description to [email protected]. Include the affected URL or endpoint, steps to reproduce, and what you observed. Screenshots or a proof-of-concept help.
Our target is to acknowledge every report within 72 hours of receiving it.
We investigate, fix what's real, and let you know the outcome.
Please report privately by email first rather than publishing an issue publicly, so there's a chance to fix it before details circulate.
Most compliance pages are marketing. This one is a status table. Here is exactly where ABUZ8 LLC stands today:
| Framework / claim | Status | The honest detail |
|---|---|---|
| TLS / HTTPS | LIVE | Enforced by Cloudflare on every page and API route. |
| Security headers | LIVE | nosniff, SAMEORIGIN framing, strict referrer policy — served on every page (see Infrastructure tab). |
| PCI-DSS (payments) | LIVE via Stripe | Handled entirely by Stripe's hosted checkout. We never see or store card numbers, so PCI scope stays with Stripe. |
| GDPR / CCPA deletion | LIVE | Waitlist emails deleted on request via [email protected]. We hold no other personal data. |
| SOC 2 | NOT CERTIFIED | We are a small company and do not hold a SOC 2 report. We won't claim one until an auditor issues one. |
| ISO 27001 | NOT CERTIFIED | Same honesty: no certification held today. |
| HIPAA | NOT COVERED | We do not handle health information and are not a HIPAA-covered entity. |
Every product and feature on this site carries one of three labels — it's our public honesty contract, and it applies to this page too:
Working today and verifiable. If it says LIVE, you can use it right now.
Exists, but gated — access via waitlist or request. Never sold as finished.
Planned, not built. A ROADMAP item never has a buy button. Ever.
Why so strict? Because fake claims destroy trust — and chargebacks destroy small companies. Nothing is sold here that doesn't exist. See Audit & Transparency for how we check our own work.
Short, honest answers about how this site handles your data and your money.
Content on abuz8ai.com is provided for educational and informational purposes. We make no revenue, earnings, or results claims — none may be claimed, by policy. Every product is tested before it's sold; there is no blanket money-back guarantee, and if a product is broken or misdescribed we make it right (see Refunds). Every feature carries a Truth-Status label (LIVE / EARLY ACCESS / ROADMAP) so you always know what exists today versus what is planned. The Polymarket tester uses read-only public market data and a paper-trading simulator only — no real money, no financial advice. Read the full version: Disclaimer · Privacy · Terms · Refunds.