Privacy Policy

1. Overview & Core Philosophy

This Privacy Policy explains how iPhone Duo Responsiveness Tester (operating via duoresponsive.com, referred to herein as "DuoResponsive", "we", "us", or "our") handles data when you access or use our responsive web design testing suite, device catalogs, and technical guides.

Unlike conventional analytics-heavy web platforms, DuoResponsive was conceived as an engineer's workbench. We believe developers and designers should be able to audit sensitive staging environments, unreleased features, and proprietary client layouts without leaking confidential URLs or metadata to third-party databases.

2. Zero-Logging Architecture

Our core testing suite functions entirely via modern front-end web APIs. When you input a target website address (e.g., https://example.com or http://localhost:3000) into our dual-screen simulator:

• Direct Browser Execution: Your client web browser initiates the HTTP/HTTPS request directly to the target destination. The response is rendered directly within client-side sandboxed <iframe> elements.
• No Reverse Proxy: We do not route your test traffic through an intermediate proxy or man-in-the-middle inspection gateway.
• No URL Storage: We do not record, store, or log the URLs you test, whether in web server logs, persistent databases, or event streaming pipes.

3. Information We Never Collect

To eliminate any ambiguity, DuoResponsive deliberately does not collect:

4. Client-Side Data & Local Storage

To offer a convenient, friction-free developer experience, DuoResponsive stores a small set of non-personal user preferences in your web browser's localStorage or session state:

• Simulator Settings: The current zoom scale, active posture (dual-screen unfolded, split 90°, or closed cover), and orientation (portrait vs landscape).
• Language Preference: The chosen UI language (English, French, Spanish, German, Portuguese, Korean, or Japanese) to preserve localized navigation between visits.

You can clear these preferences at any time by wiping your browser's site data or cache for duoresponsive.com.

5. Simulator & Iframe Sandboxing

DuoResponsive isolates rendered viewports utilizing standard browser sandbox protections:

• Same-Origin Isolation: Third-party websites loaded inside our dual-panel frames cannot inspect or access the cookies, credentials, or DOM of duoresponsive.com.
• Localhost & Intranet Testing: Because our simulator runs on your machine, you can safely test internal URLs (such as http://localhost:3000 or internal IP subnets). These intranet addresses are resolved strictly by your operating system's local network stack.
• X-Frame-Options Compliance: We strictly honor web security headers configured by target websites, including X-Frame-Options and Content Security Policy (CSP) frame-ancestors directives.

6. Cookies & Tracking Pixels

DuoResponsive does not use advertising cookies, marketing tracking pixels, or third-party behavioral profiling scripts.

Any cookies set while you interact with an external website inside our simulator are managed independently by that specific third party in accordance with your browser's cookie partition policies (such as CHIPS / partitioned cookies).

7. Edge Hosting & Infrastructure

DuoResponsive is deployed globally across the Cloudflare Workers edge network. When your browser requests assets (such as HTML, CSS, JavaScript, or device SVG models), Cloudflare processes the HTTP request to deliver assets with minimal latency.

Standard ephemeral edge network telemetry (such as IP addresses and User-Agent headers) is processed solely for denial-of-service mitigation, bot mitigation, and routing reliability in accordance with Cloudflare's strict privacy standards. We do not correlate IP addresses with identifiable individuals.

8. Rights Under GDPR, CCPA & Global Laws

Whether you access DuoResponsive from the European Union (GDPR), the United Kingdom (UK GDPR), California (CCPA / CPRA), or other jurisdictions with comprehensive privacy frameworks:

• Right of Access & Deletion: Because we do not create user accounts or maintain databases of personal information, we hold no personal data profile linked to your identity.
• No Sale or Sharing of Personal Data: We do not sell, rent, monetize, or share personal data with data brokers or marketing affiliates under any circumstances.
• Non-Discrimination: Every feature of DuoResponsive is equally accessible to all users worldwide without requiring consenting to tracking.

9. Technical & Operational Security

We deploy multiple layers of industry-standard security safeguards to protect our web applications:

• Strict Transport Security (HSTS): All connections to duoresponsive.com are forced over modern TLS 1.3 encryption.
• Content Security Policy: Robust CSP headers restrict script execution and defend against cross-site scripting (XSS) vectors.
• Automated Edge Updates: Software dependencies and runtime modules are continuously scanned and patched against known vulnerabilities.

10. Children's Privacy (COPPA)

DuoResponsive is an engineering and technical web utility intended for developers, designers, and students of software engineering. We do not knowingly solicit, collect, or process information from children under the age of 13 (or under 16 in certain jurisdictions), consistent with the Children's Online Privacy Protection Act (COPPA).

11. Policy Modifications

We may occasionally update this Privacy Policy to reflect enhancements to our device catalog or changes in legal regulations. When updates are published, the "Last Reviewed" date at the top of this document will be amended accordingly. Your continued use of the website following any posted modifications signifies your awareness of the revised terms.