Agent Fire Drill is a static page. It has no server, no accounts, no analytics, and no telemetry — the page's own content-security policy forbids it from making network connections at all (connect-src 'none'). You can verify that in the page source.
What is stored: your drill counts (played, completed, cheapest clean run) live in this browser's local storage, on this device only, so the stats line can persist between visits. Clear your browser storage and they're gone; there is no copy anywhere else.
What is shared: nothing, unless you press a share button yourself. Challenge cards and PNG exports are generated on your device and go only where you paste or post them. Challenge codes contain only a mission ID, three rule settings and a prediction — never names, scores from other devices, or anything about you.
What the game is: a fictional simulation. It does not connect to, evaluate, or certify any real agent, account, or system.
FICTIONAL SIMULATION — NOT AN AUDIT, AUTHORIZATION OR SECURITY CERTIFICATE.