PRIVACY
& DATA.
What stays in your browser, what must leave it, and when data may be retained.
Local tools
Hash/Checksum, JSON, UUID, URL/Base64 and other tools marked LOCAL run in your browser. Text and files used by those utilities are not sent to the Bit Happens backend.
External queries
DNS, RDAP, Email Health, Domain Health, domain inventory, HTTP/HTTPS and similar tools must send the technical target you entered — such as a domain, hostname or IP — to the Bit Happens Worker and, where required, public upstream services. Do not enter passwords, tokens or other secrets.
The technical target and parameters required for the requested query.
Run the requested diagnostic and return its result.
Normal queries do not create an account-level query history. Infrastructure providers may keep operational request metadata under their own policies. API errors are logged for up to 7 days with only the route, HTTP status and error type, never your IP or the domain or IP you looked up. The Domain X-Ray keeps each group of checks in the Cloudflare cache of the data center that answered, for 5 minutes to 1 hour, so the same analysis is not repeated; the cache holds the domain and its public results, nothing about who asked. The Domain X-Ray screenshot runs only when you ask for it: it requires the Turnstile check, the domain goes to Cloudflare Browser Run, which opens the homepage in a browser, and the image stays in the same cache for up to 6 hours.
Port Check and Attack Surface active check
Active tests send the target, the ports and a Turnstile token to the backend. Turnstile is verified by Cloudflare. Limits apply per source address and per target. The Advanced Nmap module has been retired. Use these features only on assets you own or are explicitly authorized to test.
Aggregate measurements
Network Pulse may retain scheduled technical measurements of infrastructure observed by Bit Happens to build availability history. These measurements are not a personal history of visitor-entered queries.
Google Analytics only after consent
The external Google Analytics script is not loaded until Analytics has been explicitly accepted. Advertising storage and ad personalization remain disabled.
Necessary technical metadata
Like any web service, infrastructure providers may process connection and security metadata such as IP address, time, User-Agent and network information. Bit Happens uses abuse controls, rate limiting and private/reserved-target blocking for external tests.
Providers and recipients
- Cloudflare: hosting, CDN, backend (Worker), Turnstile and DNS resolution (DNS over HTTPS). Receives the IP address and technical metadata of every request.
- Google Public DNS: used only for the DNS Lookup resolver comparison. The query is made by the Worker, without sending your IP or subnet (EDNS Client Subnet disabled).
- Team Cymru: ASN, prefix and registry country of an IP, queried over DNS through Cloudflare. It only receives the looked-up IP, as a DNS query from Cloudflare's resolver, never your IP. For your own IP, city and region come from Cloudflare.
- RDAP (rdap.org and regional registries): domain and IP registration data, queried by the Worker.
- crt.sh and Cert Spotter: public Certificate Transparency logs for the domain being looked up, queried by the Worker.
- Globalping: distributed Network Pulse measurements from third-party probes; receives the measurement target.
- OpenStreetMap: map tiles in Traceroute Visual, loaded directly by your browser. Map servers receive your IP and the region shown.
- Google Analytics: only after consent.
Some of these providers are located outside Brazil, which involves an international transfer of the technical data needed to run the query you requested.
What is stored in your browser
bh-analytics-consent: your Analytics choice.bh-language: chosen language, in local storage and in a functional cookie valid for 1 year.bh-home-tour-seen: whether the home page tour was already shown.sysadmin-diag-history: recent Network Diagnostic queries, so you can reopen results.bh-ip-history-v1: IP history on the My IP page (IP, version, ASN, organization and times), up to 100 entries; the CLEAR button deletes it.sysadmin-geo-*: cached approximate location of hops in Traceroute Visual.bh-internet-pulse-history: local Network Pulse history.
This data stays in your browser and is not sent to Bit Happens. To delete it, clear this site's data in your browser settings.
Contact form
If you use the form on the About and contact page, your name (optional), email, subject, message and the page you came from are sent by email (Cloudflare Email Routing) to the Bit Happens mailbox. The site does not store the message in a database or record your IP with it; Cloudflare receives the IP for the anti-abuse check (Turnstile) and the sending limit.
We only use this data to reply (legal basis: legitimate interest and steps taken at your request, LGPD art. 7, V and IX). The message stays in the mailbox while needed to handle your request; you can ask for it to be deleted by email.
Contact and data subject rights
The portal is operated by Bit Happens Ltda (Brazilian company registration CNPJ 33.928.975/0001-33), based in Curitiba, Brazil, the controller responsible for the processing described on this page. Privacy questions, data subject requests, abuse reports and vulnerability reports: info@bithappens.com.br.
Under Brazil's LGPD (art. 18) you may request confirmation of processing, access, correction, anonymization or deletion, information about sharing, and withdrawal of consent. Since the portal has no accounts or profiles, there is usually no personal data linked to you beyond temporary technical logs kept by providers. Please include the date, tool and IP address used so they can be located.
Last updated: October 14, 2026.