Privacy, Cookies & Security

Last updated: 12 October 2026

1. About This Website

BuriXon.dev is a privately operated website featuring articles, tools, interactive widgets, games, and other web-based content.

The website is maintained by Kamil BuriXon Burek.

Contact: [email protected]

This page explains what technical information may be processed when you visit the website, how cookies and local storage are used, how usage statistics are collected, and what measures are taken to protect the service against abuse.

2. Information Collected During Visits

When you visit this website, different categories of technical information may be processed.

Usage statistics

The website operates its own analytics system to understand how visitors use the site and which content is useful. Depending on the events recorded, analytics may include:

• Visited URLs and page titles.
• Date and time of visits and other recorded events.
• Time spent on a page.
• Scrolling activity and approximate reading depth.
• Click activity.
• Whether text is selected or copied, including the length of the selected text.
• Technical information about the browser, platform, language, screen, viewport, and connection type.
• A randomly generated browser identifier used to associate analytics events.

When text is copied, the analytics system may also record a short excerpt of the selected text. Please avoid selecting or copying sensitive information on the website if you do not want that information to be included in this event data.

Analytics events are sent to the website's own statistics endpoint. The analytics database does not record visitors' IP addresses as part of the analytics event data. However, this does not necessarily make all analytics data anonymous: persistent identifiers and event histories may allow multiple actions to be associated with the same browser.

Server and security logs

The web server may record technical information about incoming requests, including:

• IP address.
• Requested URL or resource.
• Browser and device information provided through the User-Agent header.
• HTTP response status.
• Request processing time.

These records help maintain the service, diagnose technical problems, investigate suspicious activity, and protect the website against abuse.

Internal navigation information may be present in server requests. External referrer information is not intentionally stored in the server logs described here.

3. Cookies and Local Storage

The website uses browser storage for functionality, security, and analytics.

Cookies

Cookies may be used to:

• Remember that the privacy notice has been acknowledged.
• Maintain PHP sessions.
• Support security checks and verification.
• Associate analytics events with a browser or session.

Some cookies are necessary for requested website functionality or security. Other storage and tracking mechanisms may be subject to separate consent requirements, depending on their purpose and implementation.

Local storage

The website may store information in your browser's local storage, including:

• Widget positions and interface states.
• Minimized or maximized widget settings.
• Widget contents and preferences, including information associated with interactive games, calculators, and decoders.
• The position of the interactive spider widget.
• A randomly generated analytics identifier.

This information is generally stored on your device and is not automatically sent to the website's PHP backend simply because it exists in local storage. Individual features may transmit information when they communicate with the server.

You can clear cookies and local storage through your browser settings. Doing so may reset preferences, remove saved widget states, or require security verification again.

4. Security and Abuse Prevention

The website uses technical and operational measures to reduce malicious traffic and unauthorized activity. These may include:

• Custom server-side validation and request filtering.
• Rate limiting and IP-based restrictions.
• Cloudflare proxy, DNS, and HTTPS-related services.
• User-Agent checks and detection of suspicious requests.
• Honeypots and JavaScript-based challenges.
• Additional verification checks, including simple challenge questions.
• Temporary restrictions on selected functionality when suspicious activity is detected.
• Logging of requests to suspicious or commonly targeted paths, including paths that do not exist on the website.
• Reporting serious abuse to relevant hosting or network providers.

A security verification cookie may be issued and refreshed periodically. Depending on the verification rules, visitors may be asked to complete additional checks before receiving normal access.

These measures are intended to protect the website and its visitors. No website or security system can guarantee complete protection against every attack.

5. Web Push Notifications

If you choose to subscribe to web push notifications, the website may store the subscription endpoint and associated cryptographic keys needed to deliver notifications.

These details are used to manage the subscription and send requested notifications. Push delivery involves the relevant browser or operating-system push service, so notification-related technical information may be processed by that service under its own privacy terms.

You can withdraw your subscription through the browser's notification settings or the website's available subscription controls, where provided.

6. Third-Party Services

The website uses Cloudflare infrastructure for services such as traffic proxying and security. As a result, requests to the website pass through Cloudflare's infrastructure, where technical request information, including source IP addresses, may be processed as part of delivering and protecting the service.

The website's Web Analytics JavaScript snippet has been disabled. This means that the Cloudflare Web Analytics snippet is not intentionally injected into pages through that feature.

Website resources such as fonts and selected JavaScript libraries are hosted locally where configured, rather than deliberately loaded from their original third-party hosts.

Features such as web push notifications may nevertheless involve external service providers, as described above.

The website does not intentionally send its own analytics event payloads to third-party analytics platforms. This does not mean that no information is processed by infrastructure providers involved in delivering the website or by services required for specific features.

7. Data Retention

Different types of records are retained for different periods.

• PHP sessions: The configured session lifetime is up to approximately one month. Actual expiration may depend on server configuration and session cleanup.
• Analytics data: Statistics are periodically cleared manually, typically every one to two months. There is no guarantee that every record is removed on an exact schedule.
• Server logs: Logs may be archived periodically and retained for an extended period for security and abuse investigations. Archived logs have historically been retained for approximately 18 months or longer, and no automatic deletion schedule is currently guaranteed.
• Cookies and local storage: These remain until their configured expiration, removal by the website, or deletion by the visitor, depending on the storage mechanism.

Retention periods may change as the website's technical and security requirements evolve. Data should not be retained longer than necessary for its purpose.

8. Purposes and Legal Basis for Processing

Depending on the type of information and the circumstances, technical information may be processed for purposes including:

• Providing website functionality requested by visitors.
• Maintaining sessions and saving preferences.
• Protecting the website against abuse and malicious activity.
• Diagnosing errors and maintaining service reliability.
• Measuring website usage and evaluating content performance.
• Managing web push subscriptions where a visitor has subscribed.

Where the GDPR applies, the legal basis depends on the specific processing activity. It may include legitimate interests in operating and securing the website, taking steps to provide a requested feature, or consent where consent is legally required.

Storage or access to information on a visitor's device may be subject to additional rules under applicable electronic communications and privacy law. Where consent is required, it must be obtained before the relevant non-essential storage or tracking takes place.

9. Your Rights

Where applicable under data protection law, you may have the right to:

• Request access to personal data concerning you.
• Request correction of inaccurate data.
• Request deletion or restriction of processing.
• Object to processing based on legitimate interests.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with the competent data protection supervisory authority.

To make a privacy-related request, contact:

[email protected]

Please provide enough information to allow the request to be understood and handled securely. Do not send passwords or unnecessary sensitive information.

Some analytics records may be difficult to associate with a particular person because the analytics database does not contain IP addresses. Security logs and other technical records may contain additional information. Requests will be assessed according to the applicable law and the information reasonably available.

10. Children's Privacy

This website is not specifically designed to collect personal information from children. If you believe that personal data has been collected inappropriately, please contact the website operator.

11. Changes to This Policy

This policy may be updated when website functionality, security measures, data processing, or applicable legal requirements change. The latest version will be published on this page, together with its update date.

12. Contact

For questions about privacy, cookies, analytics, or security, contact:

Kamil BuriXon Burek
Email: [email protected]

Thank you for visiting burixon.dev.