Skip to content
Legal

Privacy Policy

Last updated: September 16, 2026

Introduction

OpenHack, Inc. ("OpenHack," "we," "our," or "us") operates the openhack.com website and the OpenHack security scanning platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services. By accessing or using our services, you agree to the terms of this Privacy Policy.

Information We Collect

We collect information you provide directly, such as your name, email address, and payment information when you create an account or subscribe to our services. We also collect usage data automatically, including IP addresses, browser type, operating system, pages visited, and interactions with our platform.

When you use our security scanning services, we may process source code and repository metadata that you submit for analysis. This data is used solely to provide scanning results and is handled in accordance with our data security practices described below.

Cookies and browser storage

On our marketing website, optional PostHog analytics starts only after you accept it. It measures page visits and clicks on links and buttons using a browser identifier. Session recording is disabled. Rejecting analytics does not prevent you from using the website.

  • Privacy preference: openhack:privacy:v1 in local storage remembers your analytics choice and its date for 180 days. This storage is necessary to respect your choice.
  • Analytics: after acceptance, PostHog uses ph_openhack_landing and related local/session-storage entries for browser and session identifiers. Its first-party cookie lasts up to 180 days. Existing installations may use names starting with ph_phc_. Analytics identifiers are cleared when you reject or withdraw consent, or when an expired preference is detected on your next visit. PostHog may retain a local __ph_opt_in_out_* marker to remember its capture preference.
  • Sign-in status: the website may read oh_logged_in, a cookie set by the OpenHack app, to show a Dashboard link. The marketing website does not set your authentication session. App-session cookies have their own lifecycle.
  • Embedded videos: we do not connect to YouTube until you choose to load a video. YouTube may then use its own storage and process viewing data under Google's privacy policy. You can unload the player; clearing storage already set by YouTube requires your browser's controls.

You can accept, reject, or change your analytics preference using Cookie settings in the footer. We treat Global Privacy Control and Do Not Track signals as requests to keep optional analytics off. If browser storage is blocked, your choice applies to the current visit only. Following external links, including our booking and app links, takes you to services with their own privacy practices.

How We Use Your Information

We use the information we collect to provide, maintain, and improve our services; process transactions and send related information; send technical notices, updates, and support messages; respond to your comments, questions, and requests; monitor and analyze usage trends to improve user experience; detect, prevent, and address technical issues and security threats; and comply with legal obligations.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Source code submitted for scanning is encrypted in transit and at rest, and is automatically deleted after analysis is complete unless you explicitly choose to retain scan history.

Data Sharing

We do not sell your personal information. We may share information with third-party service providers who assist us in operating our platform, processing payments, or analyzing usage data. These providers are contractually obligated to use your information only as necessary to provide services to us. We may also disclose information if required by law, regulation, or legal process.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated data at any time by contacting us.

Your Rights

Depending on your location, you may have certain rights regarding your personal information, including the right to access, correct, or delete your data; the right to restrict or object to processing; and the right to data portability. To exercise these rights, please contact us at legal@openhack.com.

International Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy.

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of our services after any changes constitutes your acceptance of the updated policy.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at legal@openhack.com.