Privacy

No browsing analytics.

There is no analytics pixel on this site. There is no tag manager, no advertising pixel, no session recorder and no third-party script of any kind. Ordinary page views are not profiled, and reading a page sets no cookie.

That is a decision rather than an oversight. This site exists to do two things: help the right people decide whether to apply for a position, and let a counterparty confirm that the firm is real. Neither job is improved by knowing which paragraph you read twice.

Three things on the site do collect data, and each one only when you choose to use it: the puzzle-interest form, the timed puzzle race, and an application sent by email. Each is set out below.

Puzzle interest.

The interest form on the careers page stores nothing until you tick the consent box and press submit. When you do, we store:

1. The contact details you typed: an email address, a LinkedIn profile URL or an X profile, or any of them.
2. A one-way SHA-256 hash of a device fingerprint derived from browser and graphics capabilities. The raw fingerprint is never stored. The hash is computed in your browser at submit time; it is not computed on page load and is not sent without consent.
3. The User-Agent string of that request, cut to 256 characters, for abuse review.
4. The UTC time of your consent.

We use that record only to recognise people who asked to take part in the puzzles. It is not sold, not shared with advertisers, and not joined to trading or identity systems. It is kept until you ask us to delete it.

The puzzle race.

Taking part in the race at /puzzle/ needs an email address, and the race works in a way that can only be judged from a record of how an answer was written. When you take part, we store:

1. Your email address, to send you a one-time code and to recognise you between rounds. The code is stored only as a hash and expires after ten minutes.
2. A session cookie, mansa_puzzle_session, set when you enter the code. It is HttpOnly, Secure and SameSite=Strict, it lasts 24 hours, and the server keeps only a hash of it. It is the only cookie on the site.
3. Your attempt: the answers you typed, the time you started and submitted, how long the page was hidden, and a log of your key presses with their timings. The log is how the race tells typed reasoning from pasted text, and it is capped in size.
4. A review record: the outcome of the automatic checks and of the human review of your attempt, with the reviewer's name.
5. If you win a prize: the display name you chose to show, if you chose one, and the payout network, wallet address and transaction reference used to pay you.

One external service sees part of an attempt. Written answers are judged in part by DeepSeek, an external AI service. For each written answer it receives the question, the answer text, the attempt's timings, and counts drawn from the keystroke log (characters typed, deletions, paste-like bursts, times the page lost focus). It never receives your email address, your name or the log itself. DeepSeek's own privacy policy governs what it does with a request. Its verdict is advisory: a person decides every outcome that pays.

The one-time code is sent from our own mail server, directly to yours, with no mailing service in between.

Rate limits use your connection's network address, held in memory only and never written to the database.

How long it stays. Sessions and one-time codes expire as stated above. Attempts, reviews and the prize ledger are kept as the record of the race; the payout ledger is append-only by design, so a paid prize is never altered or removed. If you ask us to delete your race data, write to the puzzle address: a person removes what can be removed and replies to say what is kept and why.

An application.

An application arrives by email at the careers address, on our own mail server, and is read by the people who would work with you. It is kept while the position is under consideration and while we might reasonably come back to you about it. If you ask us to delete it, we delete it, and we reply to say that we have.

We do not run applications through an automated screening service, we do not sell or share them, and we do not add you to anything.

Everything else is local.

Every asset is served from this domain. The typefaces are self-hosted. There is no embedded video, no map and no social widget. The content security policy allows the page to talk to this site only, which is what the interest form and the puzzle race need, and forbids every other origin.

Server logs.

The process that serves this site does not keep an access log of page views. It logs its own errors, and a failed attempt to send a one-time code, so that we can fix them. Those logs are not joined to puzzle or interest records and are not used to build a picture of a visitor.

If this ever changes.

If measurement beyond what this page describes is ever added, this page will say so before it is switched on. Anything more than a self-hosted, cookieless aggregate counter is a different site, with a different purpose.

Asking us anything about this.

Write to the correspondence address that fits your question. A person answers.