Trust Center
PrivacyLast reviewed 2026-10-03
Cookies set
None
Analytics or ad trackers
None
Accounts
None
Pages using localStorage
12
Stored in your browser
| Page | Key | Contents | Cleared by |
|---|---|---|---|
| All pages | theme | Light or dark choice | Clearing site data |
| /commute/ | epa:* | fueleconomy.gov vehicle responses | Expires after 7 days |
| /tirepressure/ | tirepressure.inputs | Placard values, unit choices, saved location | Clearing site data |
| /tirepressure/ | tirepressure.hist.* | Open-Meteo history summary by rounded location | Replaced daily |
| /cve/ | cve.prefs, cve.watchlist | Window choice; watched CVEs | Watchlist remove; clearing site data |
| /cve/ | cve.rec.* (sessionStorage) | CVE records | Closing the tab |
| /flowchart/ | flowchart:chart | Flowchart shapes and arrows | Clearing site data |
| /kpitree/ | kpitree:tree | Tree boxes and relationships, when not Connected | Clearing site data |
| /kpitree/ | kpitree:open | Open tree, when Connected | Clearing site data |
| /frontier/, /kpitree/ | frontier:key | API key, after Connect | Disconnect |
| /frontier/ | frontier:pane | Open tab | Clearing site data |
| /USStates/, /worldmap/, /mlbstadiums/ | USStates:mine, worldmap:mine, mlbstadiums:mine | "Create your own" visited list | Clear |
Requests to third parties
| Page | Sent | Recipient |
|---|---|---|
| All pages | Font request (IP address, browser) | Google Fonts |
| /commute/ | Vehicle selection | fueleconomy.gov |
| /commute/, /tirepressure/ | Zip code | zippopotam.us |
| /commute/, /tirepressure/ | Address or place name | Nominatim (OpenStreetMap) |
| /commute/ | Route coordinates | OSRM demo router |
| /tirepressure/ | Place coordinates; device location when the location button is used | Open-Meteo; Nominatim |
| /seattlesports/ | Live score requests; team logo images | ESPN (cdn.espn.com, a.espncdn.com) |
| /tempest/ | Weather station requests | WeatherFlow |
| /cve/ | CVE ID of an opened record | CVE Program (cveawg.mitre.org) |
| /frontier/ | Fuel and service log reads; writes with the API key once Connected | Cloudflare Workers and D1 |
| /kpitree/ | KPI trees, read and written only with the API key once Connected | Cloudflare Workers and D1 |
| /USStates/, /worldmap/, /mlbstadiums/ | Map library and boundary files | jsDelivr |
AccessibilityLast reviewed 2026-10-04
Target
WCAG 2.2 AA
Conformance
Not audited
Tested
2026-10-04
Practices
| Practice | Where |
|---|---|
| Page language declared | 11 of 11 pages |
| Responsive viewport; zoom not disabled | 11 of 11 pages |
| Visible keyboard focus | 11 of 11 pages |
| Skip-to-content link | 11 of 11 pages |
| Labelled form fields | /commute/, /tirepressure/, /cve/, /frontier/ |
| Image text alternatives | Decorative images alt=""; maps and charts labelled SVG |
| Test method | Source checks; browser at 1440, 1024 and 375 px; no screen reader |
Known issues
| Issue | Where |
|---|---|
| None | |
Feedback:
Security
Transport
HTTPS
Hosting
GitHub Pages
Automated data jobs
3
Pages with a server
1
Automated jobs
| Job | Schedule (UTC) | Output |
|---|---|---|
| Seattle Sports snapshot | Every 30 minutes | /seattlesports/data/snapshot.json |
| CVE Triage snapshot | Every 6 hours | /cve/data/snapshot.json |
| Commute gas prices | Daily 12:00 | /commute/data/gas-prices.json |
Frontier server
| Item | Status |
|---|---|
| Host | Cloudflare Workers, D1 database |
| Stored | Truck setup, fill-ups, services; the owner's KPI trees; no visitor data |
| Retention | Until deleted by the owner |
| Reads | Public, GET /log; KPI trees need the key |
| Writes | Bearer key, SHA-256 timing-safe compare |
| CORS origins | amanvg.com, www.amanvg.com, localhost:8765 |
| Caching | no-store |
| Visitor IP addresses | Seen by Cloudflare; not stored in D1 |
Controls
| Control | Status |
|---|---|
| Content-Security-Policy | None |
| Subresource Integrity | jsDelivr scripts on /USStates/, /worldmap/, /mlbstadiums/; not available for Google Fonts |
| Public client token | WeatherFlow read token in /tempest/ source |
Disclosure
| Item | Where |
|---|---|
| Report a vulnerability | GitHub private report |
| Security contact | |
| security.txt | /.well-known/security.txt |
| Source | github.com/amanvg/amanvg-web |
Data sources
| Source | Used for |
|---|---|
| fueleconomy.gov (U.S. DOE and EPA) | Vehicle ratings |
| AAA | State gas price averages |
| © OpenStreetMap contributors (ODbL) | Geocoding |
| OSRM | Driving routes |
| Open-Meteo (CC BY 4.0) | Temperature, elevation and history |
| Zippopotam.us | Zip code to state |
| CISA (Known Exploited Vulnerabilities, Vulnrichment) | Exploited CVEs and exploitation status |
| FIRST EPSS | Exploit prediction scores |
| NVD (NIST), CVE Program | CVE records and severity scores |
| ESPN | Seattle sports scores and schedules |
| WeatherFlow Tempest | Weather station readings |
| us-atlas, world-atlas | Map boundaries |
| US Census, Natural Earth | Boundary data behind us-atlas and world-atlas |
| Nissan (2022 Frontier owner's manual) | Maintenance schedule |
| Cloudflare (Workers, D1) | Frontier log storage |
| Bernie Smith, Made to Measure KPIs | KPI Tree method and level colours |
| D3 | Mapping library |
| North Cascades, Ivan Chermayeff, National Park Service, 1972 (Wikimedia Commons lists public domain; Smithsonian Cooper Hewitt) | Homepage banner |
| Oswald, Vollkorn, Work Sans (OFL), served by Google Fonts | Typefaces |