[kroltan]

Privacy ones by using URLs for images or imports that point to external domains, could leak who is visiting.

There is also a way to do a CSS keylogger for input elements, but I don't think the website has any or that users would type anything sensitive.

Beyond that, it's as safe as visiting any other website, especially if you don't use an ad blocker.

[oh_sigh]

Not with content-security-policy set correctly(I think?)