Privacy Policy
Overview
This website (jaffacakes118.dev) is a personal website and developer portfolio operated by JaffaCakes118. Your privacy is respected, and this page outlines how information is handled when you visit.
Information Collection & Analytics
We do not collect any personal information (such as your name, email address, physical address, or payment details) when you browse this website.
We use Google Analytics (Google tag / GA4) to help understand how visitors engage with the site. This service collects anonymous, aggregated metrics such as:
- Approximate geographic location (country or city level)
- Browser type, operating system, and device category
- Pages viewed, visit duration, and referral sources
- Aggregated interaction events (such as hash lookups, file uploads, outbound link clicks, or copying public wallet addresses) without storing personally identifiable information
Cookies
Google Analytics uses first-party cookies (such as _ga and _ga_*) stored on your device to distinguish unique visitors and track session data. These cookies do not store any personal identification details.
Managing Cookies & Opting Out
You can control, block, or delete cookies at any time through your web browser settings. Disabling cookies will not impair your ability to browse and use this website.
To opt out of being tracked by Google Analytics across all websites, you can install the official Google Analytics Opt-out Browser Add-on.
Security & Bot Protection (Cloudflare Turnstile & Rate Limiting)
To protect this website and analysis endpoints from automated abuse, bot scraping, and denial-of-service spam, we use Cloudflare Turnstile and Cloudflare infrastructure services. Turnstile evaluates non-intrusive technical telemetry (such as browser capabilities and network headers) to verify human interaction without tracking individuals across sites or harvesting personal identification data.
Visitor IP addresses are processed ephemerally at the network edge by Cloudflare Workers solely to enforce automated rate limits (e.g., limiting rapid automated fetch/upload requests) and defend against denial-of-service attacks. IP addresses are not used to build persistent user profiles.
File & Threat Analysis Processing
When you use the File & Threat Analysis tool (/analysis/) to scan files or lookup hashes, information is processed as follows:
- Sample Files & Metadata: When you upload a file, our servers process the file binary to calculate cryptographic hashes (SHA-256, SHA-1, MD5), file size, and file type. Encrypted or compressed archives may be decrypted in-memory inside your browser prior to upload.
- Public Sandbox Sample Retrieval: When you search for a hash that is not currently cached in our database, our system may query Hatching Triage's public sandbox repository. If a public sample exists and is within our platform limit (up to 100 MB), our server may fetch the sample binary and overview metadata to initiate automated analysis.
- Third-Party Security Services: To provide multi-engine detection, sandbox detonation, and threat reputation, submitted samples and hashes are forwarded to independent security partners:
- VirusTotal (Google Chronicle) for multi-engine antivirus scanning.
- Hatching Triage (Recorded Future) for behavioral VM sandbox detonation.
- Kaspersky OpenTip for threat intelligence and reputation scoring.
- Public Threat Sharing Warning: External threat analysis engines frequently share uploaded samples with the broader global security research community, antivirus software vendors, and intelligence networks to improve detection. Do not submit confidential personal data, sensitive commercial files, passwords, or private encryption keys.
- Data Retention & Caching: Calculated hashes, analysis timestamps, engine detection scores, behavioral signatures, and network indicators are cached in our Cloudflare D1 database to serve permalinks and eliminate redundant upstream scans. The original file binary is discarded by JaffaCakes118 after dispatching to the analysis engines.
Data Rights & Cache Removal Requests
Because we do not operate user accounts or maintain personal user databases, we do not hold personal identification profiles. However, if you believe a file analysis report or sample metadata cached on our platform inadvertently contains proprietary source code, confidential business data, or private personal information belonging to you, you may submit a cache removal request by contacting:
contactjaffacakes118@protonmail.com
Please provide the relevant cryptographic hash (SHA-256) and the specific reason for your request. We will review and purge cached report records from our database where appropriate.
Children's Privacy
This website is not directed toward children under the age of 13 (or under 16 in jurisdictions governed by the EU/UK GDPR). We do not knowingly collect personal information from children.
Third-Party Links
This website contains links to third-party platforms and services (including YouTube, the Chrome Web Store, Google Play, Ko-fi, Steam, Twitter/X, and Discord). We do not control and are not responsible for the privacy practices or content of these external sites.
Contact
If you have any questions or concerns regarding this privacy policy, you can contact:
contactjaffacakes118@protonmail.com