Skip to content

Last updated 1 September 2026

Privacy Policy

What we collect when you use this website, why we collect it, and what you can ask us to do with it.

Who we are

0xExploit Labs is an independent open-source project operated from Pakistan. It is not a registered company. Questions about this policy, or about anything held about you, go to [email protected] and reach the people who maintain it.

This policy covers this website. It does not cover the open-source tools themselves, which run entirely on your own infrastructure and send us nothing.

What we collect

We keep the amount of data we hold about visitors deliberately small.

  • Anything you type into the contact form: your name, email address, optional organisation and your message.
  • Standard request data (IP address, user agent, requested path), logged by the hosting provider and the CDN that serve this site.
  • Your IP address, held in memory for a few minutes, to rate-limit the contact form against automated submissions. It is not written anywhere and does not survive a restart.
  • Nothing else. There are no advertising trackers, no third-party analytics cookies and no cross-site profiling on this site.

Why we collect it

  • To read and reply to the message you sent us.
  • To keep the site running, diagnose faults and defend against abuse.
  • To meet legal obligations where they apply to us.

How long we keep it

Contact form messages are kept for as long as the conversation is useful, and no longer than 24 months.

Request logs are produced and retained by the hosting provider and the CDN under their own schedules. We do not keep a separate copy, and we do not mine them.

Who we share it with

Contact form submissions are sent as ordinary email over SMTP and stored in a mailbox we operate. The mail provider that carries and holds that message processes it on our behalf, under their own terms. Nothing else receives it: we do not sell personal data, and we do not share it with advertisers.

Your rights

Depending on where you live, you may have the right to:

  • Ask what personal data we hold about you.
  • Ask us to correct anything inaccurate.
  • Ask us to delete it.
  • Object to or restrict how we process it.
  • Receive a copy in a portable format.

Cookies

This site sets no cookies. Not one: not for analytics, not for preferences, not for sessions. It also stores nothing on your device by any other route: no local storage, no session storage, no fingerprinting.

That is why you have not been asked to accept anything. A consent banner exists to obtain permission for storage that is not strictly necessary, and there is none here to permit. If that ever changes, the banner arrives before the storage does, not after.

Changes

If this policy changes materially, we will update the date at the top of this page and note the change in the repository history.

Contact

Questions about this policy, or a request to exercise any of the rights above, can go to [email protected].