Privacy Policy

1. Scope

Hackers School ("we", "us", "our") is an educational platform for CTF and kernel exploitation training. This Privacy Policy covers personal data we process when you use our website, join our waitlist, purchase access, or communicate with us.

2. Information We Collect

• Contact data, including your email address and any details you share with support.
• Account and learning data, such as enrollment status, progress, and submitted challenge notes.
• Transaction metadata from purchases and subscriptions handled by payment providers.
• Technical usage data such as pages visited, timestamps, browser type, and diagnostic events.

3. How We Collect Data

• Directly from you when you fill out forms, join the waitlist, or contact us.
• Automatically through cookies and event telemetry on the website.
• From service providers that process payments, subscriptions, fraud checks, and delivery of our services.

4. How We Use Data

• To operate and improve training tracks, mentorship workflows, and support.
• To process waitlist requests, purchases, and subscription management.
• To measure product usage, debug issues, and protect platform security.
• To comply with legal obligations and enforce our Terms of Service.

5. Cookies and Analytics

We use cookies and similar technologies to keep the site functional, understand how it is used, and improve performance. We currently use product analytics tooling (including PostHog) to collect event data such as visited pages, referring URLs, and interaction flows.

You can control cookies through your browser settings. Blocking some cookies may affect site behavior.

6. Payments

Payment checkout and subscription billing are processed by third-party providers (including Polar). We do not store full payment card numbers on our servers. Payment providers process your payment details under their own privacy terms and security controls.

7. Data Sharing

We may share personal data with:

• Service providers that host, secure, analyze, or process payments for the platform;
• professional advisors where required for legal or compliance purposes; and
• authorities when disclosure is required by law or needed to protect rights and safety.

We do not sell your personal data to data brokers.

8. Retention

We retain data only for as long as necessary to provide services, maintain records, resolve disputes, prevent abuse, and meet legal obligations. Retention periods depend on data type, contractual needs, and applicable law.

9. Security

We use reasonable administrative, technical, and organizational safeguards to protect personal data. However, no system is completely secure, and we cannot guarantee absolute security.

10. International Transfers

Depending on your location, your information may be processed in countries other than where you live. When required, we use appropriate safeguards for cross-border data transfers.

11. Your Rights and Choices

Depending on your jurisdiction, you may have rights to access, correct, delete, or export your personal data, and to object to or restrict certain processing. You can request these by contacting us at the address below. We may need to verify your identity before fulfilling requests.

12. Children's Privacy

Our services are not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child provided personal information, contact us and we will take appropriate action.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date and, where required, provide additional notice.