Your Second Curve: a website without cookies or third-party scripts

Your Second Curve is the website for the book of the same name by Dr Arnd Halbach. It speaks to senior leaders who build their own advisory practice after years in corporate life and brings three things together: the book, a free toolkit of thirteen worksheets on 48 pages and a podcast whose first episodes arrive in October 2026. The site is in English and was made by primero.link.

Arnd Halbach knows us from several projects. The site for his firm The Principals Group was built by us as well, and on our home page he talks about working with us in a voice message.

What the site has to do

The audience is experienced executives, mostly between 45 and 60. They arrive through a recommendation, a LinkedIn post or the book and want to understand quickly what this is and what is in it for them. So the site has a single path forward: first the promise, then the system in three layers, then the toolkit to download.

The toolkit is the core. Anyone who enters first name, last name and email receives a print version and a fillable PDF by email. One worksheet is shown on the page as an example and opens larger in the browser's native dialog element, which brings focus handling and the Escape key with it, without an extra library.

Measured on 23 September 2026

We loaded the home page in headless Chrome and recorded what gets transferred:

Nothing coming from other servers is no accident. The site sends a Content Security Policy that allows scripts, fonts, images and connections from its own domain only. An ad or analytics script added later would simply be blocked by the browser. That makes a cookie banner unnecessary.

Zero automatically detected violations show that the most common failures are absent: low contrast, missing alt text and unlabeled fields. Tools only cover part of the criteria, though, and the rest takes a manual review.

AI images with a notice

Some images on the site are photorealistic and generated with AI, such as the book in a reader's hands. Since 2 August 2026, Article 50 of the EU AI Act requires a notice for those. Your Second Curve puts it as real text right on the image: "AI-generated image". It is visible as soon as the image is, and screen readers read it out. That is exactly the approach we describe in Labelling AI images and recommend in our AI labelling check.

Privacy without detours

The site is hosted in Germany. The details from the toolkit form go into the applicant tracking system The Principals Group already uses, on servers in the EU. The privacy notice says exactly that, and the FAQ on the site repeats it in one sentence. Anyone who wants to know what happens to their data does not have to search.

What other sites can take from it

Three decisions carry over to almost any company website:

1. Load only what your own domain delivers. Fonts hosted locally, no embeds, no third-party analytics. That saves the banner and makes the site faster.
2. A security policy as a lock. It keeps the site clean even when someone later wants to add a quick script.
3. Label AI images openly. One line on the image costs nothing and meets the duty under Article 50.

If you want your site to work like this: with up to six pages it fits our offer Website in two weeks.

Sources

• yoursecondcurve.com, home page, FAQ and privacy notice, accessed 23 September 2026
• axe-core, Deque Systems
• Regulation (EU) 2024/1689, Article 50