Don't take our word for it.

We say nothing leaves the page. Telling you to open your browser's network tab is not evidence — it asks you to trust your own reading of our page, inside our page. So here is the test itself. It runs on your machine, against whatever you point it at, and it fails loudly if we are lying.

Run it

curl -s https://morphy.kiwi/verify.mjs -o verify.mjs
node verify.mjs https://morphy.kiwi/

It needs Node and nothing else — no install, no account, no package. Read it first; it is 90 lines and it is meant to be read.

Download verify.mjs

What it asserts

request the page with a cold cache
1 nothing is requested from any host but the one you named
2 no cookie is set, in any header, at any point
3 no storage is written — local, session, or indexed
4 the page still works with every other file 404ing
5 typing into it produces no request at all
6 the whole thing is under 30 KB

If any of those fail, the script exits non-zero and prints which promise broke. We would rather you find it than not know.

The part we cannot hand you

This checks what the page does. It cannot check what we intend, and it cannot certify us — nobody independent has cold-read this work yet, and no real user has used it and told us we were wrong. Our own instrument puts the distance between what we claim and what we have proven at 23. That number is on the front page for the same reason this script exists.