1. Overview & Scope
This Privacy Policy outlines how personal data and technical information are handled across candraoctavianr.com, associated subdomains, web utilities, and browser extensions published by Candra Octavian Ramadhani.We operate under strict data minimization and privacy-first principles: we only collect the minimum information strictly necessary to provide our tools, deliver AI assistance, secure our systems against abuse, and respond to direct inquiries.2. Services & Information We Process
A. Contact & Direct Communication
When you reach out via our contact form, chat confirmation card, or direct email, we collect the details you provide (such as your name, email address, and message) solely to communicate with you and respond to your inquiry. We do not sell, rent, or distribute contact information to third-party marketers.B. Interactive AI Assistant & Message Synthesis
Our site includes an interactive AI assistant designed to help visitors explore Vian's background, technical skills, projects, and articles, or compose structured inquiries:- Real-Time Inference: User prompts and active page context are transmitted via secure, encrypted HTTPS to AI inference endpoints solely to generate streaming answers.
- Ephemeral & Privacy-Preserving: Chat conversations are ephemeral and not indexed to build persistent behavioral or marketing profiles.
- Client-Confirmed Synthesis: When you request the assistant to refine or draft a message, the content is synthesized within your active session and is never sent until you explicitly review and click “Confirm & Send Message”.
C. Hosting & Network Diagnostic Tools
Our site provides public diagnostic utilities (e.g., DNS record lookups, WHOIS queries, IP lookups, ping/port tests, HTTP header analysis, and SSL checks).Target hosts, domains, or IP addresses entered into these tools are processed in real time solely to perform the requested lookup. Query inputs are ephemeral, never indexed to personal identities, and execution logs are regularly purged.D. Browser Extensions
Browser extensions developed and published by Candra Octavian Ramadhani (such as developer tools, hosting toolbars, and productivity add-ons) adhere to strict privacy safeguards:- Local-First Execution: Wherever possible, extension functions run locally within your browser sandbox without transmitting browsing activity to external servers.
- Targeted Network Lookups: When performing diagnostic queries (DNS, IP, HTTP headers), requests query public resolvers or documented APIs strictly to fetch the requested records.
- Zero Invasive Tracking: We never log your browsing history, keystrokes, personal passwords, or credentials. Permissions requested are limited to documented functionality.
3. Security, Spam Protection & Abuse Prevention
To maintain site reliability and protect infrastructure against malicious activity, we employ an automated multi-layered security architecture:- Bot Verification: Public forms utilize privacy-preserving bot challenges (such as Cloudflare Turnstile) that authenticate legitimate human requests without tracking cross-site browsing history.
- WebShield & Rate Limiting: In-flight requests are protected by real-browser header tokens (WebShield) and IP-based rate limiting (15 queries per 5-minute window) to prevent denial-of-service and scraper automation.
- Violation Strikes & Temporary Access Restrictions: Repeated prompt injection attempts, toxic slurs/harassment, or continuous off-topic query flooding incur security violation strikes. Accumulating 3 strikes results in a temporary 30-minute block on the offending IP address, client fingerprint, or device ID.
- Operational Security Logging: High-severity abuse incidents may trigger real-time alerts to a private administrative channel solely for triage and firewall tuning. Security counters are stored with short TTL expirations and purged automatically.
4. Cookies & Local Storage
We use minimal cookies and browser local storage strictly for functional, non-advertising purposes — such as remembering theme preferences (dark/light mode), interface states, or session authentication on password-protected blog articles. We do not use third-party tracking or advertising cookies.5. Data Retention & Transmission
All communications across our site are encrypted using modern SSL/TLS protocols. Ephemeral query caches, diagnostic results, and temporary security tokens are retained only for their operational duration and regularly purged.6. Contact & Inquiries
If you have questions, feedback, or data requests regarding this Privacy Policy, please contact: [email protected].