PRIVACY POLICY Last updated: 2026-02-05 This website respects your privacy. We do not use advertising trackers, third-party analytics platforms, cookies, or invasive monitoring tools. All analytics are self-hosted and designed to collect only minimal, privacy-preserving technical information. Our goal is to understand how this site is used responsibly, transparently, and ethically. -------------------------------------------------- 1. WHAT DATA WE COLLECT When you visit this website, limited technical information is collected through a self-hosted analytics system. This may include: - An anonymized visitor identifier derived from your IP address using cryptographic hashing - Country and city-level location based on IP - Pages visited - Referring website if any - Date and time of visit - Network and security metadata including ASN, TLS version, and bot score We do NOT collect: - Names, email addresses, or personal identifiers - Account information - Precise GPS location - Cookies - Cross-site tracking data - Advertising identifiers - Device fingerprinting data -------------------------------------------------- 2. HOW WE COLLECT DATA Analytics data is collected using a lightweight JavaScript beacon served from our own infrastructure. The beacon sends a small, anonymous request when a page is loaded. We do not use: - Google Analytics - Facebook Pixel - Third-party trackers - Behavioral profiling tools All analytics processing is under the direct control of the site owner. -------------------------------------------------- 3. IP ADDRESS HANDLING Raw IP addresses are never stored. Before any processing: - IP addresses are combined with a secret cryptographic salt - The result is hashed using SHA-256 - The original IP address is immediately discarded Only the resulting hash is stored. This process is one-way and non-reversible. It is not possible to reconstruct or identify an individual from stored data. -------------------------------------------------- 4. PURPOSE OF DATA COLLECTION Collected data is used solely to: - Understand which content is useful - Improve site reliability and performance - Detect abuse, scraping, and automated attacks - Monitor availability and operational issues We do NOT use this data for: - Advertising - User profiling - Behavioral targeting - Cross-site tracking - Sale or sharing of personal data -------------------------------------------------- 5. DATA RETENTION We retain data only for as long as necessary for operational and security purposes. Current policy: Raw event logs: Up to 180 days Aggregated data: Indefinitely Old data is automatically deleted on a scheduled basis. -------------------------------------------------- 6. USE OF BLOCKING AND PRIVACY TOOLS Some users may use ad blockers, privacy tools, or browser protections that prevent analytics requests from being sent. We respect these choices. If analytics requests are blocked, no data is collected. No attempt is made to bypass or evade such protections. -------------------------------------------------- 7. LEGAL BASIS India (DPDP Act, 2023) Under the Digital Personal Data Protection Act, we process only minimal data necessary for legitimate purposes and retain it for a limited duration. No directly identifiable personal data is stored. European Union (GDPR) For visitors from the European Union, processing is based on legitimate interest in operating, maintaining, and securing this website. Data collection is limited, proportionate, and privacy-preserving. No automated decision-making or profiling is performed. -------------------------------------------------- 8. DATA STORAGE AND ACCESS Analytics data is stored using Cloudflare Workers and Cloudflare D1 infrastructure. Access is restricted to the site owner. Appropriate technical and organizational safeguards are applied to protect stored data. -------------------------------------------------- 9. DATA SHARING We do not sell, rent, or share analytics data with third parties. Data is not used for commercial profiling, advertising, or resale. -------------------------------------------------- 10. YOUR RIGHTS Depending on your jurisdiction, you may have the right to: - Request information about stored data - Request deletion of data - Object to processing - Seek clarification Because we do not store directly identifiable personal data, it is usually not possible to associate records with a specific individual. If you have concerns, you may contact the site owner. -------------------------------------------------- 11. OPT-OUT If you do not wish to be included in anonymous analytics: - You may disable JavaScript - You may use tracking protection tools - You may use content blockers The website will continue to function normally. No functionality is restricted. -------------------------------------------------- 12. CHANGES TO THIS POLICY This policy may be updated periodically. Any material changes will be reflected on this page with an updated revision date. -------------------------------------------------- 13. CONTACT For questions about this policy or data handling practices, please contact: [privacy@dissec.org] -------------------------------------------------- We believe privacy is a fundamental right. This website is designed to collect signals about system behavior, not identities of individuals.