Privacy Policy

Last updated: 17 October 2026.

This policy explains what data Digimasi ("we") collects through digimasi.com, what we use it for, and your rights over it. We handle personal data in line with Indonesia's Personal Data Protection Law (Law No. 27 of 2022).

Data we collect

What you send through the contact form: your name, email, WhatsApp number, company name (if given), the need you choose, and your message.

Technical data: when the form is sent we receive your IP address and basic browser information. We use these to prevent spam and to limit excessive attempts.

Security log: automated requests for files this website has never had (for example attempts to open a login page or configuration file that does not exist) are recorded with the IP address, originating network, browser identifier and the address requested. We use these records to study attack patterns and may publish the results in summary form. Ordinary visits are not recorded this way, and the records are deleted after 90 days. IP addresses that clearly attack us (never ordinary visitors) are reported to AbuseIPDB, a public database used to block attackers.

Security Headers Check: when you use this tool, we open the home page of the domain you enter once, like an ordinary visitor, and show you the result as a report. We keep each report for 90 days so its link and QR code work, then delete it. We keep only the domain, the final address, the grade, the headers we saw and the date of the check. Nothing about the person who ran the check is stored. Report pages are not indexed by search engines, and only people who have the link can open them. So that the same domain is not opened again and again, a result is reused for at most 10 minutes. To limit the number of checks, your IP address is counted for at most one hour, and we record the total number of checks per day without IP addresses.

The "Checked" badge: if you get a badge for your website, we keep its domain, the verification method used (a DNS record or a meta tag), the verification code, the grade and the dates of the re-checks, for as long as the badge exists. A verification code that is never used is deleted after 7 days. We check a badge again at most once a week, when it is opened: we look for that DNS record or meta tag and at the home page's headers, like an ordinary visitor. Removing the DNS record or the meta tag ends the badge: it turns grey, and its record is deleted 90 days later. We keep nothing about the person who got the badge.

Gambling Spam Check: when you use this tool, we open the home page, robots.txt and sitemap (at most four sitemap files) of the domain you enter, like an ordinary visitor and under our own bot name, and show you the signs we found on the same page. We do not keep the result as a report unless you ask for it by email (see "Report emails from the tools" below), and nothing about the person who ran the check is stored. So that the same domain is not opened again and again, a result is reused for at most 10 minutes. The limits per IP address and the daily total are the same as for the Security Headers Check.

Analytics: if you press "Allow" on the cookie notice, we use Google Analytics to count visits and see which pages are read. Google Analytics sets cookies in your browser and sends visit data (pages opened, approximate location, device and browser type) to Google. Until you press "Allow", Google Analytics is not loaded at all. To withdraw your consent, clear the cookies and site data for digimasi.com in your browser settings: Google Analytics stops, its cookies are removed, and the notice appears again on your next visit.

This website does not use advertising cookies or third-party advertising trackers.

Report emails from the tools

Under a result of the Security Headers Check or the Gambling Spam Check, you can ask for the report by email. This is optional and needs no account.

What we use: the email address you enter, the page's language, the domain that was checked, and your choice in the optional marketing checkbox. To limit the number of emails, we keep a hash of your email address and of your IP address (not the addresses themselves) for 24 hours and then delete it, and we count the total number of emails per day.

What for: to send one email with a summary of the report and a link to the full report. The email has no attachment, no tracking pixel and no click tracking. If you also tick "I accept marketing emails from Digimasi in the future", we keep your email address in our contact list, together with the domain, the tool's name, the language, the time of your consent and the exact consent text you saw, so that we can send you news about our services.

Legal basis: under Indonesia's Personal Data Protection Law (Law No. 27 of 2022). For the report email, your own request: you enter your email address and press "Send email", and we send the report you asked for. For marketing emails, your consent, given with the optional checkbox. You can get the report without agreeing to marketing emails, and you can withdraw that consent at any time with the unsubscribe link in the email or by email to privacy@digimasi.com.

How long we keep it: if the marketing box is not ticked, your email address is used for that one email only and is not kept. If it is ticked, we keep your address until 12 months after our last contact with you and then delete it, or sooner if you unsubscribe. A Gambling Spam Check report asked for by email is kept for 90 days so that its link works, with nothing about you.

Who sends it: the email is sent through Resend, an email delivery service, on our behalf.

Your rights: you can ask for access to, correction or deletion of your data, or withdraw your consent at any time, by email to privacy@digimasi.com. We answer within 3×24 hours. Every email sent with marketing consent also has an unsubscribe link: one click withdraws your consent and deletes your address from our contact list.

What we use it for

• Replying to your enquiry and contacting you by email or WhatsApp
• Preparing a quote for what you need
• Protecting the form from spam and abuse
• Sending the tool reports you ask for by email, and marketing emails if you agreed to them

We do not sell your data or use it for anything beyond the purposes above.

Who helps us

The website and our systems run on Cloudflare infrastructure, which stores and processes data on our behalf. The contact form, the Security Headers Check and the Gambling Spam Check are protected by Cloudflare Turnstile, which checks technical information about your device to tell people apart from automated programs. These providers process data only to run those services. Resend sends the tools' report emails on our behalf. Google (Google Analytics) receives visit data only if you agree to it.

Storage and security

Your messages are kept in our customer management system and can only be accessed by the Digimasi team handling them. All traffic to this website is encrypted over HTTPS.

We keep your data for as long as we need it to answer your enquiry and follow up on working together. When it is no longer needed, or when you ask, we delete it.

Your rights

Under the Personal Data Protection Law you have the right to:

• Know about, and ask for a copy of, the personal data we hold about you
• Correct inaccurate data
• Ask us to delete your data
• Withdraw your consent to processing

To use these rights, send a request through the contact form or by email to hello@digimasi.com and mention the email you used before.

Changes to this policy

We may update this policy from time to time. The date of the latest update is always shown at the top of this page.