Privacy Policy

1. PCI-DSS Data Compliance & Sandbox Standards

Under the Payment Card Industry Data Security Standard (PCI-DSS), checking or verifying Bank Identification Numbers (BINs) is fully compliant as long as no sensitive customer assets are processed.

• We strictly process and look up only the public **6-digit or 8-digit range prefix** of a card number.
• We **never collect, store, log, or transmit** full Primary Account Numbers (PANs), cardholder names, expiration dates, or CVV/CVC security codes.
• There is no possibility of credit card data exposure or theft on our system, as our databases have zero knowledge of individual financial accounts.

2. Data We Process & Purpose of Logs

When you use our search features, playground sandbox, or GET API endpoint, we temporarily receive network attributes which are handled under strict constraints:

• Client IP Addresses: Incoming IP addresses are logged inside an in-memory sliding-window cache. This is strictly required to enforce our rate limit protections (10 reqs/min for API, 60 reqs/min for website lookup) to block malicious crawler scripts.
• Temporary Log Pruning: These rate limit tracking logs are not stored persistently and are automatically deleted from memory within 5 to 10 minutes.
• No Third-Party Tracker Analytics: We value your privacy and do not embed telemetry trackers, marketing scripts, or third-party ads networks that scan user behavior.

3. Cookies Policy

CC Bins utilizes cookies in an extremely minimal capacity:

• We do not write tracking or advertising profiling cookies.
• We utilize native localStorage elements strictly to store user preferences such as your choice of visual mode (**Dark Mode vs. Light Mode**).

4. Contact Privacy Officer

If you have additional questions or require more information about our privacy procedures, do not hesitate to contact our data compliance coordinator at admin@ccbins.co.