Comprehensive Privacy Policy

1. Scope and Applicability

This Privacy Policy governs the collection, use, retention, and protection of information obtained through ProdThink (hosted at vorascope.com, referred to as "we", "us", "our", or the "Platform"), including all web applications, standalone distributions, technical publications, and related documentation. By accessing our services, you acknowledge that you have reviewed and understood the provisions of this policy.

2. Information We Never Collect

Unlike conventional online developer platforms, ProdThink operates without requiring user accounts or profile creation. Consequently, we do not solicit, process, or store:

• Personal credentials such as usernames, passwords, phone numbers, or government identifiers.
• Proprietary enterprise data, API payloads, database connection strings, or environment secrets.
• Payment details, credit card numbers, or financial billing information.
• Keystroke logs, clipboard history, or screen recording telemetry.

3. Standard Infrastructure Access Logs

When your browser requests web pages, static stylesheets, or standalone tool bundles, our content delivery network and edge host servers automatically record standard technical log entries. These diagnostic records typically comprise:

• Internet Protocol (IP) address (anonymized where required by regional privacy regulations).
• Browser user-agent string and operating system architecture.
• Requested resource path and timestamp of the HTTP request.
• HTTP response status code, referrer URL, and transmitted byte volume.

Purpose of log processing: Edge logs are strictly utilized for DDoS mitigation, load balancing, firewall enforcement, network troubleshooting, and server performance monitoring. Diagnostic logs are automatically rotated and purged after 30 days.

4. Browser Local Storage Transparency

ProdThink uses strictly functional, non-tracking browser local storage to preserve your user interface choices across browsing sessions. We do not employ tracking pixels, canvas fingerprinting, or third-party behavioral advertising cookies.

5. European Economic Area (GDPR) Data Subject Rights

If you are a resident of the European Economic Area, United Kingdom, or Switzerland, you enjoy comprehensive statutory rights under GDPR regulations, including:

• Right of Access: The right to request confirmation of whether your personal data is processed.
• Right to Rectification: The right to correct inaccurate or incomplete personal records.
• Right to Erasure: The right to have your records erased when retention is no longer necessary.
• Right to Restriction of Processing: The right to halt specific data processing operations.
• Right to Data Portability: The right to obtain machine-readable copies of provided records.
• Right to Object: The right to object at any time to processing based on legitimate interests.

Note: Because ProdThink maintains zero database user records or identity profiles, in practice we possess no persistent personal data linking to individual identifiable users.

6. California Consumer Privacy Act (CCPA / CPRA) Rights

Under the California Consumer Privacy Act of 2018 (CCPA) and California Privacy Rights Act (CPRA), California residents are entitled to specific privacy notices:

• Notice of No Sale or Sharing: ProdThink does NOT sell, rent, monetize, or share your personal information or browsing records with third parties for cross-context behavioral advertising.
• Right to Know & Delete: You have the right to request disclosure and deletion of personal data collected in the preceding 12 months.
• Non-Discrimination: We will never deny services, charge different prices, or degrade utility performance if you exercise your privacy rights.

7. Children's Online Privacy Protection

Our website and utilities are designed for software developers, IT professionals, and adult learners over the age of 16. We do not knowingly market to or solicit information from children under the age of 13. If a parent or guardian discovers that a child has inadvertently transmitted personal data to our support channels, please contact us immediately to have the communication permanently removed.

8. Data Security and Technical Safeguards

We implement robust industry-standard technical measures to secure communications between your client device and our static asset hosts:

• Strict Transport Security: All web traffic is strictly enforced over modern TLS 1.3 / HTTPS protocols.
• Content Security Policy: We employ strict directives restricting script origins and eliminating cross-site injection vectors.
• Cryptographic Generation: Identifiers and keys generated by client utilities employ browser-native cryptographic pseudo-random algorithms.

9. Amendments to This Policy

We reserve the right to revise this Privacy Policy periodically to reflect updates in technical functionality, international regulatory requirements, or infrastructure architecture. When updates occur, the "Last updated" timestamp at the top of this document will be revised accordingly.

10. Data Protection Desk & Inquiries

For formal privacy requests, statutory rights verification, or security reports, please address communications directly to our official support desk: