Privacy Policy

• Create and manage your account and subscription.
• Verify cryptocurrency payments and activate subscriptions.
• Deliver platform features: articles, courses, certifications, quizzes, leaderboards, machine tracker.
• Send transactional emails: account verification, password resets, subscription confirmations.
• Send optional weekly digest emails (unsubscribe anytime).
• Detect, investigate, and prevent fraud, abuse, and unauthorized access.
• Improve platform performance and develop new features.
• Comply with applicable legal obligations.

• Account data: Retained for the lifetime of your account. Deleted within 30 days of account deletion request.
• Payment screenshots: Retained for 12 months for dispute resolution, then permanently deleted.
• Activity logs: Retained for 90 days for security monitoring, then automatically purged.
• Session records: Inactive sessions expired after 30 days.

• Passwords: Passwords stored with Hashed . We cannot recover your password.
• Transport: All data transmitted over HTTPS/TLS encryption.
• Sessions: HTTP-only, Secure, SameSite=Strict cookies to prevent attack.
• Session integrity: Verified per request using IP and user-agent fingerprinting.
• Uploads: Payment screenshots stored only for verification.

• Essential cookies: Required for the platform to function, including login and session management. Cannot be disabled.
• Preference cookies: Used to remember your choices such as cookie consent. These expire after a reasonable period.
• Remember Me: An optional cookie set only if you choose to stay logged in across sessions.

• Cloudflare: DNS, CDN, and SSL. May process request metadata per their Privacy Policy.
• Cloudflare Turnstile: Bot protection on login/register. No personal data stored beyond the verification challenge.
• Hosting: Server infrastructure. May retain server logs per their policies.
• Email: Transactional email delivery only (verification, password reset).

We do not share personal data beyond what is necessary to deliver the service.

LazyHackers publishes cybersecurity educational content including CTF writeups, penetration testing techniques, and security research — strictly for educational and ethical research purposes.

• Access: Request a copy of personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your account and personal data.
• Portability: Request data in a structured, machine-readable format.
• Objection: Object to processing of your data for certain purposes.
• Unsubscribe: Opt out of marketing emails at any time via link in email.

GDPR — European Users

EEA residents have rights under GDPR. Legal basis: (a) contract performance for account/subscription, (b) legitimate interests for security and fraud prevention, (c) consent for optional communications.

CCPA — California Users

California residents have the right to know what data is collected, request deletion, and opt out of sale. We do not sell personal data.

DPDP Act — Indian Users

Indian users have rights under the Digital Personal Data Protection Act 2023 including access, correction, and erasure. Contact contact us here.

LazyHackers is intended for users aged 16 and above. We do not knowingly collect data from children under 16. If you believe a child has provided data, contact contact us here immediately and we will delete it.

We may update this Privacy Policy periodically. Material changes will be communicated via email or a prominent platform notice. The "Last updated" date at the top reflects the most recent revision. Continued use after changes constitutes acceptance.