Effective date: December 28, 2025 · Last reviewed: July 2026

HackIndex is an informational security reference site. We respect your privacy and collect as little data as possible. No account is required to use this website.

Information We Collect

When you visit HackIndex, our web server automatically records limited technical data. This is not used to build a profile of you.

Data collected automatically includes: IP address, browser type and version, operating system and device type, pages visited and timestamps, HTTP referrer (if present), and general server log data.

This data is used only for security monitoring and abuse prevention, site reliability and debugging, and anonymous aggregated internal statistics. It is not linked to any identity, and it is never sold or used for advertising.

Cookies

By default we set only essential cookies: a session cookie, a language preference, and security cookies (such as CSRF protection). These are required for the site to work and are never used for cross-site tracking.

We also offer two optional cookie categories. They are off by default and only activate if you explicitly allow them in our cookie banner:

• Analytics cookies - Google Analytics, to understand aggregate usage.

• Marketing cookies - Google Tag Manager, to manage related tags.

Until you opt in, no analytics or marketing scripts load and no such cookies are set. You can change or withdraw your choice at any time via the Cookie settings link in the footer.

Some pages contain affiliate links. If you click one, a third-party affiliate network (for example Amazon) may set its own cookies for referral attribution and fraud prevention. We do not control those cookies; they are governed by that third party's own policies.

Do Not Track and Global Privacy Control

We honour browser opt-out signals. If your browser sends a Global Privacy Control (Sec-GPC) or Do Not Track (DNT) signal, we automatically keep all analytics and marketing off, load no Google scripts, and suppress the cookie prompt, regardless of any stored choice. We publish our support at /.well-known/gpc.json and /.well-known/dnt-policy.txt.

Analytics

We use Google Analytics and Google Tag Manager, but only after you opt in. We use no analytics for visitors who decline or who send a GPC or DNT signal. We do not perform cross-site tracking or individual profiling.

Error Monitoring

We use Sentry to detect and diagnose technical faults. It may process limited technical data, such as IP address and user agent, when an error occurs. For visitors who send a GPC or DNT signal, these identifiers are removed before the data is sent to Sentry.

Feedback Forms

Some pages include an optional feedback form so you can indicate whether content was helpful. No personal data is required to submit feedback. Any submitted text may be stored internally to improve content quality, and is deleted once it is no longer needed. Feedback is not shared with third parties.

Affiliate Links

HackIndex takes part in affiliate marketing programs, including Impact and the Amazon Associates Program. Some links are affiliate links: if you click through and make a purchase, we may earn a small commission at no extra cost to you.

When you click an affiliate link, limited technical data (such as referral URL, timestamps, device and browser information, and IP address) may be processed by the affiliate network and/or merchant for attribution, fraud prevention, and reporting.

As an Amazon Associate I earn from qualifying purchases.

Tor and I2P Access

HackIndex is reachable via Tor and I2P. These versions are served directly and are not proxied through Cloudflare. We do not attempt to identify, de-anonymise, or correlate users on anonymity networks. The same minimal data practices in this policy apply.

Data Retention

Server logs are retained for 9 days, then deleted. Feedback submissions are kept only until review is complete, then deleted. Aggregated, anonymised statistics may be retained indefinitely, as they cannot identify individuals.

Data Sharing

We do not sell personal data, and we never share data for advertising. Limited data may be processed by third parties solely to operate the site:

• Hosting provider - processes server logs and request data to run the infrastructure.

• Cloudflare - processes IP addresses and request metadata for CDN and DDoS protection on the clearnet site.

• Google (Analytics and Tag Manager) - only if you opt in to analytics or marketing, and never for GPC or DNT visitors.

• Sentry - processes technical error data; identifiers are stripped for GPC or DNT visitors.

• Affiliate networks and merchants - process referral and technical data only when you click an affiliate link.

Cloudflare, our hosting provider, Google, and Sentry act as data processors. Affiliate networks process data independently under their own privacy policies.

Your Rights

Because we do not maintain user accounts or store personally identifiable information beyond short-lived server logs, there is usually no personal data profile to request, correct, or delete. If you believe we hold data about you and wish to exercise any applicable rights (access, rectification, erasure, or objection), please contact us and we will respond promptly.

Changes to This Policy

We may update this policy from time to time. The effective date at the top of this page will reflect any material changes. Continued use of the site after an update means you accept the revised policy.