Privacy Policy

This Policy describes HACKEXE’s actual data processing on hackexe.com, staging.hackexe.com and related services. Essential processing is performed to operate and secure the service; optional analytics starts only after separate consent.

Refusing analytics does not restrict the catalog, account, payment, support or any other core site feature.

We may collect the following types of information:

• Account data: email, display name, profile preferences, sign-in status and email verification status
• Order and affiliate data: transaction identifiers, products, amounts, statuses and attribution; HACKEXE does not store full bank card details
• Support requests, reviews and applications that you submit
• Security logs: IP address, User-Agent, URL, request time, response status and referrer
• After analytics consent: viewed pages, events, browser and device information; Yandex Metrica may also record sessions through Session Replay

We use the collected data for the following purposes:

• Providing and maintaining the Service
• Processing orders and delivering products
• Customer support
• Analytics and Service improvement — only with your consent
• Fraud prevention and security
• Compliance with legal obligations

Essential cookies and local storage support authentication, security, language selection and storage of your analytics choice. Separate consent is not requested where storage is strictly required for the requested feature.

Google Analytics, Google Ads measurement and Yandex Metrica do not load or make network requests until you select “Allow analytics”. You can refuse just as easily or open “Analytics settings” in the footer at any time to withdraw consent. On withdrawal, known analytics cookies are removed and the page reloads without analytics scripts.

• Google Analytics and Google Ads — traffic statistics and effectiveness measurement without personalized advertising
• Yandex Metrica — statistics, click maps and Session Replay; Yandex retains Session Replay recordings for up to 15 days
• Google reCAPTCHA — protects selected forms from automated abuse and is treated as an essential security service, independently of analytics consent

We do not sell your personal data to third parties. We may share data with:

• Payment processors for transaction processing
• Google and Yandex when analytics is enabled, and Google reCAPTCHA when a protected form is used
• Law enforcement agencies when required by law

We implement industry-standard security measures to protect your data, including:

• SSL/TLS encryption for data transmission
• Secure data storage with restricted access
• Regular security audits

Raw IP addresses, User-Agent strings and referrers in our logs and first-party statistics are retained for no more than 30 days. Logs are then deleted and these fields are cleared from first-party statistics. Pseudonymous page-view events without raw IP/UA are retained for no more than 395 days and then automatically deleted.

The name, email, topic, message and internal support notes associated with a request are retained for no more than 12 months from receipt and are then deleted automatically. An administrator may delete a request earlier after it has been resolved.

Account data is retained until the account is deleted. Order records are retained for the time needed to perform the transaction, resolve disputes and meet mandatory accounting or tax duties. The consent choice remains in local browser storage until you change it or clear site data.

You have the right to:

• Request access to your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent to data processing

We may update this Privacy Policy from time to time. Changes take effect from the moment of publication on this page.

• Email: support@hackexe.com
• Telegram: @hackexeee
• Discord: discord.gg/NBFuDfX6Me