The badge does not phone home.
Every badge on this site is offered as inline SVG: the type is outlined, so it needs no font, and nothing in it points at us. You paste it, and it renders. We learn nothing.
This is not a nicety. A hotlinked badge is a tracking pixel: it would tell us the URL of every article carrying a declaration and how often each one is read. That is a tempting dataset, and it is exactly the dataset a standard about honesty must refuse to collect. Hosted SVG files exist for people who genuinely need a URL — not because we want the traffic.
The site collects nothing. No analytics, no cookies, no fonts fetched from a third party (they are self-hosted), no embeds. It is static HTML on a CDN.
Signing is a pull request. There is no form, so there is no list of email addresses for anyone to leak, sell, or subpoena.