Privacy Policy & Telemetry Guidelines

1. Operational Scope & Privacy Philosophy

At Bouquetargt (accessible via bouquetargt.quest), we build browser-based web speed diagnostics, Core Web Vitals scoring tools, synthetic latency ping matrices, and single-thread CPU benchmarks. We operate under a strict zero-knowledge performance testing philosophy.

We believe that diagnostic speed tools should empower web developers, engineers, and site administrators without compromising user privacy, tracking individuals across the web, or compiling invasive behavioral profiles. This Privacy Policy details our data collection boundaries, browser storage tokens, edge processing architecture, and your rights under global privacy regulations including the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA/CPRA).

2. Categories of Data & Telemetry Handled

Unlike conventional web services, Bouquetargt performs the vast majority of diagnostic computations directly inside your client web browser memory (Web Performance API, Navigation Timing API, Resource Timing API, and JS Execution Benchmarks).

A. Diagnostic URLs & Target Endpoints

When you type a website URL or API endpoint into the Interactive Speed Auditor or Payload Estimator, that URL is used exclusively to simulate synthetic network requests, measure Round-Trip Time (RTT), calculate Time To First Byte (TTFB), and estimate asset compression ratios. Target URLs are never indexed, cross-referenced with your identity, or sold to third-party data brokers.

B. Synthetic Benchmark Telemetry

During benchmark runs, our engine generates technical telemetry metrics including:

• Network Latency: RTT ping timing in milliseconds (ms).
• Rendering Milestones: First Contentful Paint (FCP), Largest Contentful Paint (LCP), Interaction to Next Paint (INP), and Cumulative Layout Shift (CLS).
• Compute Throughput: Client-side JavaScript execution speed measured in millions of operations per second (M/s).
• Simulated Profile Configurations: Selected connection profiles (e.g., Unthrottled 10 Gbps Fiber, 5G, 4G LTE, or 3G) and edge node region selections.

C. System Server Logs & IP Addresses

When your browser requests page assets from our server infrastructure, standard web server access logs temporarily capture your public IP address, user-agent string, HTTP request timestamp, and referrer URL. These server logs are collected strictly for network security, DDoS defense mitigation, rate-limiting enforcement, and diagnostic troubleshooting.

3. Legal Bases for Processing under GDPR

If you are located in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, our processing of your information relies on specific legal grounds under Article 6 of the EU GDPR:

• Legitimate Interests (Art. 6(1)(f)): Processing target URLs and browser benchmark loops is necessary to deliver real-time speed auditing functionality, maintain platform security, prevent abuse, and optimize our global edge infrastructure.
• Consent (Art. 6(1)(a)): Explicit consent provided when opting into non-essential browser storage preferences via our interactive Cookie & Diagnostic Settings banner.
• Compliance with Legal Obligations (Art. 6(1)(c)): Retaining minimal technical log records when required by law or lawful regulatory requests.

4. Local Storage & Browser State Management

Bouquetargt utilizes modern browser storage mechanisms (such as localStorage) to store ephemeral diagnostic state. These tokens allow you to persist test logs, benchmark history, and custom tool preferences across page reloads without requiring user registration or passwords.

Key storage keys include:

• bouquet_cookie_consent: Records your consent preference regarding non-essential diagnostic log caching (30-day expiration).
• bouquet_speed_logs: Temporarily caches recent benchmark session outputs directly on your local device (14-day retention).

You may clear these storage tokens at any time using your browser's clear site data features or through our Cookie Policy management interface.

5. Data Retention & Security Architecture

We practice strict data minimization across our entire architecture:

• Client Diagnostic Logs: Kept in your browser memory and cleared upon closing the session unless saved to localStorage by your choice.
• Server Security Logs: Raw web server access logs containing IP addresses are automatically purged or anonymized within 14 days.
• No User Profiling: We do not build behavioral, cross-context, or commercial profiles of site visitors.

All communication with Bouquetargt is encrypted using Transport Layer Security (TLS 1.3/1.2) with HTTPS enforced across all endpoints, protecting data against eavesdropping or tampering in transit.

6. Global Privacy Rights (GDPR & CCPA/CPRA)

Depending on your geographical jurisdiction, you possess specific statutory privacy rights regarding your personal information:

A. European Union (GDPR) & UK Rights

• Right of Access: Request confirmation of whether personal data concerning you is processed.
• Right to Erasure ("Right to be Forgotten"): Request deletion of any personal log data linked to your connection.
• Right to Restrict or Object: Object to processing based on legitimate interests or request restrictions on data processing.
• Right to Data Portability: Request export of locally stored speed audit reports in standard JSON or plaintext formats.

B. California Residents (CCPA / CPRA)

• Notice at Collection: Detailed disclosures regarding categories of personal information collected.
• Right to Know & Delete: Request access to or deletion of collected personal telemetry data.
• No Sale or Sharing of Personal Information: Bouquetargt does not sell, rent, or share your personal information or target URLs with third parties for cross-context behavioral advertising.
• Non-Discrimination: We will never discriminate against you for exercising any of your CCPA/CPRA privacy rights.

7. Children's Privacy

Our speed testing tools and technical intelligence guides are designed for web developers, system administrators, and general internet users. We do not knowingly solicit or collect personal information from children under the age of 16. If you believe a child has submitted personal data through our service, please contact us immediately to purge the records.

8. Policy Revisions & Direct Contact

We may update this Privacy Policy periodically to reflect changes in web performance standards, regulatory mandates, or engine feature enhancements. Revisions will be indicated by the "Effective Date" header stamp.

If you have questions, data protection inquiries, or wish to exercise your legal privacy rights, contact our privacy operations team: