Privacy Policy
Last updated June 2026.
What we collect
We collect account data you provide, such as your email address and display name, and drill telemetry generated as you practice, such as attempts, solves, timing, hints, and progress. We use this to operate your account, render your progress, enforce plan limits, secure the service, and improve the catalog.
Demo and product telemetry
We record product events such as demo start, demo solve, signup, pricing views, checkout starts, and checkout confirmations. These events help us understand whether the demo and upgrade funnel are working. Drill answers, flags, and terminal session contents are not used for advertising targeting.
Payments
Paid plans are processed by Stripe. We do not store your card details; Stripe handles payment data under its own terms and PCI compliance.
We use a transactional email provider to send account and security messages, such as verification, password reset, MFA recovery, billing, and support-related email. We do not use transactional email for purchased lists or cold outreach.
Cookies and conversion tracking
We use necessary cookies to keep you signed in and to run live drill sessions. We also use Reddit Ads conversion tracking, including the Reddit Pixel and Reddit Conversions API, to measure ad performance and attribute actions such as page visits, demo starts, signups, checkout starts, and purchases. Reddit may receive information such as event type, page/action metadata, browser or device signals, IP-derived identifiers, Reddit click IDs, and pixel identifiers to measure and optimize ads.
Service providers
We use service providers to run PwnKata, including hosting and infrastructure providers, authentication providers, Stripe for payments, Postmark for transactional email, and Reddit Ads for conversion measurement. These providers process data only as needed to provide their services to us.
Data sharing
We do not sell your personal data. We share data with service providers when needed to operate PwnKata, process payments, deliver email, prevent abuse, measure conversions, or comply with legal obligations.
Your choices
You can export or delete your account data from your profile settings, or by contacting us at the address on our contact page. You can also block or limit third-party cookies and tracking technologies in your browser or device settings, though some measurement may still occur through server-side conversion reporting for actions you take on PwnKata.
Contact
Questions about this policy? Reach us via the contact page.