Privacy Policy

Last updated: September 5, 2026

1. Information We Collect

We collect information to provide and improve our cybersecurity learning platform. The types of information we may collect include:

  • Account Information: Username, email address, and password hash when you create an account
  • Learning Progress: Quiz scores, completed modules, and learning statistics
  • Usage Data: Pages visited, features used, and time spent on the platform
  • Device Information: Browser type, operating system, and device identifiers

2. How We Use Your Information

We use the collected information for the following purposes:

  • Providing and maintaining the PwnHero platform
  • Tracking your learning progress and generating statistics
  • Improving our content and user experience
  • Communicating important updates about the platform
  • Ensuring the security and integrity of our services
  • Sending transactional emails (account updates, notifications)

3. Data Security

We use measures to protect personal information, including BCrypt password hashing, HTTPS/TLS for data transmission, and restrictions on access to user data. No storage or transmission system can guarantee absolute security.

4. Data Sharing and Legal Requests

We do not sell, rent, or trade your personal information. We may share information with service providers as needed to operate the platform, to comply with applicable law or valid legal process, or where lawfully necessary to protect the rights, safety, or property of PwnHero or its users.

For legal requests, we assess the requesting authority, legal basis, scope, and applicable requirements before disclosing information, and limit disclosure to what is legally required or otherwise lawfully necessary. We may seek clarification or challenge requests where appropriate. We cannot promise that information will never be disclosed to authorities or that every request will be challenged.

Copyright notices and counter-notices contain identifying and contact information. We may share a notice with the affected uploader as needed to address the complaint, and forward a qualifying counter-notice to the original claimant as described in our DMCA & Copyright Policy. Submit only information needed for the procedure. Those recipients may be outside your country.

5. Your Rights

You may request access to, correction of, deletion of, or a portable copy of your personal data by emailing pwnhero@protonmail.com. Please do not post personal data or identity documents in public community channels.

We may need information reasonably necessary to verify that a request concerns your own data. We will handle requests within applicable legal time limits and explain any lawful restrictions, including required record retention or protection of another person's rights.

Depending on applicable law, you may also have rights to object to or restrict processing, withdraw consent where processing relies on it, and complain to a competent data protection authority. Withdrawing consent does not affect the lawfulness of earlier processing.

6. Cookies and Local Storage

PwnHero uses cookies and browser local storage for functionality including:

  • Authentication: To keep you logged in securely
  • Preferences: To remember your theme settings (dark/light mode)
  • Progress: To track your learning progress locally

We do not use third-party advertising cookies or invasive tracking technologies.

7. Data Retention

We retain account data while your account is active or as needed to provide services. Following account deletion, personal information is deleted or anonymized within 30 days, subject to lawful retention needed to comply with legal obligations, resolve disputes, or address abuse. Any retained information is limited to those purposes and kept only as long as necessary.

Aggregated, anonymized statistics may be retained for platform improvement. Backup copies may persist for a limited time as part of disaster recovery procedures. Deleting an account does not require destruction of records subject to a lawful preservation obligation, including relevant copyright correspondence.

8. Children's Privacy

PwnHero is intended for users aged 13 and over, subject to any higher minimum age required by applicable law, as described in our Terms of Service. We do not knowingly collect personal information from children under 13.

If you believe a child under 13 has provided personal information, email pwnhero@protonmail.com. If we learn that we have collected such information, we will take steps to delete it and disable the relevant account as appropriate, subject to applicable law.

9. Changes to This Policy

We may update this policy and will show the revision date on this page. We will provide additional notice of material changes where required by law and obtain consent where required before processing information for a new purpose. Continued use of the platform does not replace legally required consent.

10. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please reach out: