What we collect, why, and for how long.

• Form submissions to /hack-me: name, email, optional company, optional URL, optional message, and the time of submission. We do not log message contents beyond what is needed to deliver the email to us.
• Server access logs (request path, response status, IP address for the purpose of rate limiting). Logs are retained for as short a period as operationally possible.
• Nothing else. No advertising cookies. No session-replay. No third-party analytics by default.

This site uses the minimum cookies necessary to function. We do not place advertising cookies. If a future feature requires additional storage, this page will be updated and a consent surface added before the feature ships.

• Form submissions are used solely to reply to your message and evaluate fit. We do not add you to a marketing list.
• Server logs are used to operate, secure, and debug the site. They are not sold or shared with third parties.

The fonts on this site are self-hosted via Next.js; no external font requests are made at runtime. We do not embed third-party analytics, ad networks, session-replay, or fingerprinting scripts. If we add any in the future, this page will be updated before they ship.

• Form submissions are retained only as long as needed to reply and evaluate fit, then archived or deleted.
• Server access logs are retained for a short operational window and then rotated out.
• Backups are encrypted and rotated; retention is documented operationally and reviewed periodically.

You can ask what we hold about you, ask us to correct it, or ask us to delete it. Contact us at via the contact form on /hack-me and we’ll respond within a reasonable window.

The data controller for this site is the operator of gethacked.ai. Contact for privacy questions: via the contact form on /hack-me.

When we change this policy in a material way, we update the “Last updated” date above. Editorial corrections that do not change meaning will not be flagged.