1. Fair Use & Anti-DDoS Rate Limiting
To ensure deterministic sub-50ms response latency for all mock test takers and interactive flashcard users, Bullet.quest implements intelligent server-side rate limiting:
- API Request Caps: Dynamic endpoints (such as search queries, test submission bursts, and flashcard rating pushes) are capped at a maximum of 60 requests per minute per IP address.
- Automated Bot Mitigation: The use of automated scraping scripts, headless browsers (e.g. Puppeteer, Selenium), curl loops, or bulk content downloaders is strictly barred. Violating IP addresses will be automatically blacklisted at the web application firewall (WAF) tier.
- DDoS Defenses: Cloud traffic is filtered through multi-tier anti-DDoS perimeter shields to defend against volumetric flood vectors.
2. 15-Minute Session Inactivity Rule
In accordance with banking-grade security hygiene and data protection best practices, authenticated sessions on Bullet.quest automatically timeout after exactly 15 minutes (900 seconds) of user inactivity.
- User activity is tracked via mouse movements, key inputs, and touch gestures.
- When the 15-minute threshold is crossed without interaction, the session token is purged, and the browser redirects to
login.php?expired=1. - Test engine draft responses are continuously stored in client-side IndexedDB / Web Storage, ensuring that accidental timeouts during long mock tests do not result in lost answers upon re-login.
3. Digital Accessibility & Recommended Specifications
The Bullet.quest interface is engineered using responsive CSS grid architecture and modern semantic HTML5 to deliver consistent usability across all form factors:
- Supported Browsers: Google Chrome (v90+), Mozilla Firefox (v88+), Apple Safari (v14+), and Microsoft Edge (Chromium).
- Keyboard Accessibility: All test navigation supports full keyboard hotkeys (e.g., J for Next Question, K for Previous Question, and Space for Flashcard Flip).
- Low-Bandwidth Mode: High-resolution diagrams and test graphs are dynamically compressed in modern WebP/SVG formats to function smoothly over 3G/4G connections in rural exam hubs.
4. Responsible Vulnerability Disclosure
We welcome responsible reporting of potential security vulnerabilities by ethical security researchers and independent engineers. If you discover a vulnerability:
- Notify our security team promptly at
bulletquest18@gmail.comwith detailed replication steps. - Do not exploit the vulnerability to alter, exfiltrate, or delete user data.
- Allow our engineering team reasonable time (up to 7 business days) to investigate and deploy a patch before public disclosure.
- Validated security findings are acknowledged in our Hall of Contributors.
5. Scheduled Maintenance Windows
To deliver system upgrades and database index optimizations without interrupting high-traffic test schedules, regular maintenance is scheduled exclusively during non-peak hours:
6. Webmaster & Engineering Contacts
For technical queries, firewall unblocking requests, or API integration discussions, contact the IEPL systems operations center: