This policy explains what data n0hacks collects through this website, what we use it for, and what rights you have over it. Written plainly, without unnecessary legal filler.
n0hacks is the controller for data collected through n0hacks.com. You can reach us at info@n0hacks.com for any question about this policy or your data.
Through the contact form: your email address, your company name, and the message you send us, along with the type of inquiry you select (assessment, active incident, or other).
Automatically and without identifying you individually: aggregated usage data (pages visited, approximate country, device type) via Vercel Web Analytics, a cookieless service that does not build individual profiles or track you across websites.
We do not use tracking cookies or third-party advertising pixels on this site.
Contact form data is used exclusively to respond to your inquiry and, where relevant, offer our services. We never use it for any other purpose, and we never sell or share it with third parties for commercial gain.
The legal basis for this processing is your explicit consent when filling out and submitting the form, and our legitimate interest in responding to business inquiries addressed to us.
If your inquiry doesn't turn into a contracted service, we keep your contact data for up to 24 months after your last contact, then delete it if there's been no further interaction. If you become a client, your data is kept for the duration of the contractual relationship and for the legal retention period required afterward under applicable tax or commercial regulations.
We use Resend (transactional email service) to deliver your inquiry notification to our inbox. We use Vercel for hosting and Upstash to rate-limit automated form spam. None of these providers use your data for their own purposes or pass it on to third parties; they act as data processors under our instructions.
Some of these providers may process data outside the European Economic Area. In those cases, they rely on adequate safeguards recognized under GDPR, such as the European Commission's Standard Contractual Clauses.
You can exercise your rights of access, rectification, erasure, objection, restriction of processing, and data portability at any time by writing to info@n0hacks.com. We will respond within the applicable legal deadline.
If you believe we haven't handled your data correctly, you have the right to lodge a complaint with the data protection authority in your country of residence.
We're an offensive security firm: we take protecting the data you entrust to us seriously. The site uses TLS encryption on all communications, strict security headers (CSP, HSTS), and rate limiting on automated contact form abuse.
We may update this policy occasionally to reflect changes in our practices or applicable regulations. The last-updated date appears at the top of this page.