Privacy and Visit Statistics Policy

1. Controller and scope

PT SUKSES PERDAGANGAN INDONESIA operates the INPERIT site at suksesict.co.id. This notice covers only that site and the first-party visit statistics described below.

2. Technical data recorded

For each page request not identified as a bot, the system may record the time, page path, language, device category, browser family, operating-system family, the IP address observed directly by the server, and a pseudonymous browser-instance ID.

When supplied by the browser, the system may also record a filtered referring host and public path, source type, and accepted utm_source, utm_medium, utm_campaign, utm_content, and utm_term values. Query strings, fragments, ports, credentials, account/session paths, long tokens, emails, long numbers, and sensitive terms are not retained in the referring URL. The system does not read or infer an individual visitor’s organic-search terms.

Requests matching known bot patterns are counted as bot hits and excluded from normal visitor hits. This filtering cannot guarantee that every bot is identified.

3. First-party cookie

When statistics are enabled, the server may create a random SUKSES_DEVICE_ID cookie that applies only to suksesict.co.id. It uses Secure, HttpOnly, and SameSite=Lax, with a maximum technical lifetime of two years.

The raw cookie value is not written to statistics records. The server converts it with HMAC into a browser-instance ID. The ID is not a name or account, but it is still treated as access-restricted data. Clearing cookies, private browsing, or changing browsers produces a new ID.

4. Purposes

The data is used to understand which pages and product groups are used, measure campaign sources, distinguish ordinary visits from bots, diagnose abuse or technical faults, and improve site performance and readability.

The data is not sold and is not used for cross-site advertising, cross-site tracking, advertising profiles, or device fingerprinting. IP addresses and browser-instance IDs are not treated as a count of people.

5. Storage, access, and estimated location

Statistics, dashboard sessions, and technical keys are stored in a private hosting-account directory outside public_html. The dashboard is not linked from public pages and requires a separate login. Access is limited to people authorized to manage or secure the site.

Network country, region, or city estimates use a locally stored DB-IP City Lite database. Visitor IP addresses are not sent to an online GeoIP service for this process. Estimates may be wrong because of mobile networks, corporate gateways, proxies, or VPNs and do not reveal a visitor’s real address.

Hosting and security providers may still create their own technical logs under their services and policies.

6. Retention

The active system retains the current calendar month and the preceding eleven calendar months. On the next collector request, statistical buckets and event files from older months are deleted automatically. The dashboard’s recent view is limited to 200 events.

Release packages, code backups, and site rollback packages must not contain visitor data, sessions, cookies, keys, or authentication configuration. Data that must be preserved for a legal obligation or dispute may be handled separately where applicable.

7. Recipients and disclosure

The data is not published. Hosting or security providers may access it when needed to operate or protect the service, or it may be disclosed where required by applicable law. There is no automatic export to advertising platforms or third-party analytics services.

8. Questions and your rights

You may use a WhatsApp link on the site to request information, correction, restriction, or deletion concerning visit data that can reasonably be identified. We may need to verify a request and cannot promise a match where technical data is insufficient to associate a record with the requester. Requests remain subject to applicable legal, security, and evidence-integrity obligations.

The official JDIH BPK page for Law of the Republic of Indonesia Number 27 of 2022 on Personal Data Protection is linked below.

9. Notice changes

If data types, purposes, recipients, or retention change materially, this page and its version number will be updated before the change is used as the active policy.

Law No. 27 of 2022 on Personal Data Protection — JDIH BPK

https://peraturan.bpk.go.id/Details/229798/uu-no-27-tahun-2022