Privacy Policy

Last updated: October 24, 2026

1. Information We Collect

This policy covers the PwnHero website and information we handle when arranging, delivering, or supporting paid requests outside the website.

We collect information to provide and improve our cybersecurity learning platform. The types of information we may collect include:

  • Account Information: Username, email address, and password hash when you create an account
  • Learning Progress: Quiz scores, completed modules, and learning statistics
  • Usage Data: Pages visited, features used, and time spent on the platform
  • Device Information: Browser type, operating system, and device identifiers
  • Requests and correspondence: Your name, email address, contact username, requested resources, messages, and delivery or refund correspondence when you contact us.
  • Payment records: Transaction details made available by your payment provider, which may include a transaction reference, amount, currency, date, and payment or refund status. For direct cryptocurrency payments, this may include wallet addresses, network, amount, and transaction hash.

2. How We Use Your Information

We use the collected information for the following purposes:

  • Providing and maintaining the PwnHero platform
  • Tracking your learning progress and generating statistics
  • Improving our content and user experience
  • Communicating important updates about the platform
  • Ensuring the security and integrity of our services
  • Sending transactional emails (account updates, notifications)
  • Confirming payments, fulfilling resource requests, providing support, processing refunds, and maintaining records needed for disputes or legal obligations

3. Data Security

We use measures to protect personal information, including BCrypt password hashing, HTTPS/TLS for data transmission, and restrictions on access to user data. No storage or transmission system can guarantee absolute security.

4. Data Sharing and Legal Requests

External payments: The website does not collect payment card details or provide checkout for paid resources. Whop or PayPal collects payment information through its own service. PwnHero does not collect or retain billing addresses for these requests; a provider may request a billing address or other information for its own processing. The transaction information available to us depends on the provider and payment method. See Whop's Privacy Policy and PayPal's Privacy Statement, including the terms applicable to your location.

Communication and delivery: When you choose email, Discord, Reddit, or Telegram, your messages and delivered resources pass through that service. Each service handles information under its own privacy policy. We use the contact details you provide to arrange your request and send the resource through the agreed channel.

Direct cryptocurrency payments: Public blockchains can expose transaction amounts, wallet addresses, and transaction histories. Those records may be linked to your request and cannot be deleted or altered by PwnHero. Do not share private keys or recovery phrases with us.

We do not sell, rent, or trade your personal information. We may share information with service providers as needed to operate the platform, to comply with applicable law or valid legal process, or where lawfully necessary to protect the rights, safety, or property of PwnHero or its users.

For legal requests, we assess the requesting authority, legal basis, scope, and applicable requirements before disclosing information, and limit disclosure to what is legally required or otherwise lawfully necessary. We may seek clarification or challenge requests where appropriate. We cannot promise that information will never be disclosed to authorities or that every request will be challenged.

Copyright notices and counter-notices contain identifying and contact information. We may share a notice with the affected uploader as needed to address the complaint, and forward a qualifying counter-notice to the original claimant as described in our DMCA & Copyright Policy. Submit only information needed for the procedure. Those recipients may be outside your country.

5. Your Rights

You may request access to, correction of, deletion of, or a portable copy of your personal data by emailing pwnhero@protonmail.com. Please do not post personal data or identity documents in public community channels.

We may need information reasonably necessary to verify that a request concerns your own data. We will handle requests within applicable legal time limits and explain any lawful restrictions, including required record retention or protection of another person's rights.

Depending on applicable law, you may also have rights to object to or restrict processing, withdraw consent where processing relies on it, and complain to a competent data protection authority. Withdrawing consent does not affect the lawfulness of earlier processing.

6. Cookies and Local Storage

PwnHero uses cookies and browser local storage for functionality including:

  • Authentication: To keep you logged in securely
  • Preferences: To remember your theme settings (dark/light mode)
  • Progress: To track your learning progress locally

We do not use third-party advertising cookies or invasive tracking technologies on the PwnHero website. External checkout and communication services may use their own cookies or tracking technologies under their own policies.

7. Data Retention

We retain account data while your account is active or as needed to provide services. Following account deletion, personal information is deleted or anonymized within 30 days, subject to lawful retention needed to comply with legal obligations, resolve disputes, or address abuse. Any retained information is limited to those purposes and kept only as long as necessary.

Automated Inactive Account Deletion: In accordance with data minimization principles, user accounts that show zero interaction across platform services (no quiz submissions, exam attempts, resource requests, feedback, or game scores) and have had no login activity for at least 48 hours following registration may be automatically and permanently removed from our active database. When an inactive account is deleted, all active session tokens and authentication credentials for that account are immediately revoked.

Request correspondence, delivery records, and payment or refund references are retained as needed to fulfill requests, handle refunds and disputes, and meet applicable legal obligations. Deleting a website account does not automatically delete these separate records. External providers retain their records under their own policies; public blockchain records remain on the network.

Aggregated, anonymized statistics may be retained for platform improvement. Backup copies may persist for a limited time as part of disaster recovery procedures. Deleting an account does not require destruction of records subject to a lawful preservation obligation, including relevant copyright correspondence.

8. Children's Privacy

PwnHero is intended for users aged 13 and over, subject to any higher minimum age required by applicable law, as described in our Terms of Service. We do not knowingly collect personal information from children under 13.

If you believe a child under 13 has provided personal information, email pwnhero@protonmail.com. If we learn that we have collected such information, we will take steps to delete it and disable the relevant account as appropriate, subject to applicable law.

9. Changes to This Policy

We may update this policy and will show the revision date on this page. We will provide additional notice of material changes where required by law and obtain consent where required before processing information for a new purpose. Continued use of the platform does not replace legally required consent.

10. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please reach out: