ghaymah-exam-waleed-secops/q3-privacy-mithal/privacy-report.md

Privacy Assessment Report: mithal.space

1. DevTools Technical Audit

• Cookies: No third-party tracking cookies detected. Only essential session cookies with HttpOnly and Secure flags.
• HTTPS & SSL: Enforced TLS 1.3 encryption with strong cipher suites.
• Security Headers:
  • Strict-Transport-Security: Enforced
  • X-Content-Type-Options: nosniff: Enforced
  • Referrer-Policy: no-referrer: Active (prevents query leakage to external destination sites).

2. Privacy Comparison

Feature	mithal.space	DuckDuckGo	Google
User Tracking	None	No Ad Tracking	Extensive Profiling
Search Query Logs	Disassociated from IP	Disassociated from IP	Linked to Account/IP
Hosting Jurisdiction	Sovereign Ghaymah Cloud	US / EU Servers	Global Ad Infrastructure

3. Proposed Security & Privacy Enhancements

1. Tor Onion Service Deployment: Provide a .onion endpoint for maximum user anonymity.
2. DNS-over-HTTPS (DoH): Integrate dedicated DoH resolver to prevent ISP query sniffing.
3. Zero-Log Storage Policy: Implement automated log flushing on Ghaymah Block Storage every 10 minutes.