Privacy & Data Governance

Privacy Policy & Data Minimization Charter

Our transparent practices regarding data collection, privacy protection, transient diagnostic caching, and zero behavioral tracking.

Our Core Privacy Commitment: Zero Personal Data Retention

Bravo Togel (bravo-togel.com) operates on a strict privacy-by-design architecture. We do not require account registration, do not collect personal identities, do not store payment details, and do not track individual users across the web with third-party advertising trackers.

1. Scope and Controller Identification

This Privacy Policy applies solely to information collected by Bravo Togel ("we," "us," or "our") through our website at https://bravo-togel.com/ and its public REST API utility endpoints. For privacy inquiries or data governance requests, contact our designated privacy desk at [email protected].

2. Information Processed During Diagnostic Analysis

When you use our Domain & Safety Checker, URL Redirect Inspector, SSL Certificate Analyzer, Domain Validator, or DNS Lookup tools, the following data points are processed:

  • Target Hostnames & URLs Submitted: When you enter a hostname (e.g., example.com) to test, our server performs read-only network queries (DNS resolution, SSL handshake, HTTP HEAD header requests). Target URLs are public internet identifiers and are cached transiently (typically 5 to 60 minutes) in memory to reduce server load and prevent denial-of-service abuse.
  • Client IP Address (Rate Limiting Only): To protect our diagnostic API from automated brute-force scraping and distributed denial-of-service (DDoS) attacks, client IP addresses are hashed and temporarily referenced in an in-memory rate-limiter for up to 60 seconds. We do NOT store IP addresses in permanent databases or link them to individual identities.
  • Diagnostic Results: Network findings (such as DNS record types, TLS certificate expiry dates, cipher suites, and HTTP response status codes) are generated live and displayed in your browser. They are not tied to your personal identity.

3. Server Logs and Technical Telemetry

Like virtually all standard web servers, our hosting infrastructure maintains standard HTTP access logs for technical stability, fault diagnostics, and security defense. These logs record:

  • Date, timestamp, and HTTP request method (e.g., GET /domain-safety-checker/).
  • HTTP response code and bytes transferred.
  • Browser User-Agent string (used to ensure responsive template compatibility).
  • Referring URL (if transmitted by your browser).

Access logs are automatically rotated and permanently purged on a standard 14-day rolling cycle. They are never sold, leased, or cross-referenced with external data brokers.

4. Cookie and Local Storage Usage

Bravo Togel takes a minimal approach to browser storage:

  • Strictly Necessary Cookies: We use ephemeral session tokens strictly when necessary for web application security (e.g., CSRF nonce verification) to prevent malicious cross-site request forgery.
  • No Third-Party Ad Cookies: We do not host programmatic ad networks, tracking pixels (such as Meta Pixel or TikTok Tracker), or behavioral ad profiling scripts.
  • Client-Side LocalStorage: Our diagnostic tools may store your most recent test inputs locally inside your own browser window for convenience, accessible only to you on your device. You can clear this anytime through browser settings.

5. Legal Basis for Processing (GDPR & International Standards)

For visitors residing in the European Economic Area (EEA), United Kingdom, or Switzerland under the General Data Protection Regulation (GDPR) and UK Data Protection Act, our legal grounds for processing technical telemetry include:

  • Legitimate Interests (Art. 6(1)(f) GDPR): Maintaining server security, defending against automated denial-of-service attacks, preventing SSRF exploits, and delivering requested network diagnostic reports.
  • Performance of a Service (Art. 6(1)(b) GDPR): Executing domain queries and network inspections initiated explicitly by user interaction.

6. California Consumer Privacy Act (CCPA / CPRA)

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have specific rights regarding personal information. Bravo Togel declares:

  • We do NOT sell personal information.
  • We do NOT share personal information for cross-context behavioral advertising.
  • We do NOT collect sensitive personal information as defined by California civil code.

7. Security Architecture and SSRF Hardening

Our diagnostic network engine is protected by strict application-level guardrails. All user-supplied hosts are validated against IPv4/IPv6 private ranges, loopback interfaces (127.0.0.1/8, ::1), link-local subnets (169.254.0.0/16), and internal network infrastructure before any socket connection is initiated. We never act as an open proxy or facilitate unauthorized network scanning.

8. Policy Updates and Inquiries

We may update this Privacy Policy periodically to reflect enhancements in security posture or evolving legal requirements. The effective date at the top of this document indicates the most recent revision. If you have questions about our data practices, please reach out via our contact page or at [email protected].