Privacy Policy
Effective Date: 10 August 2026
Version: 2.0
1. Introduction
HackYourWay (“we”, “us”, “our”) operates the website:
https://hackyourway.site
This Privacy Policy explains how we collect, use, store and disclose information when you visit or use our website.
HackYourWay is an educational website focused on cybersecurity, technology and related educational content.
We aim to collect and use only the information necessary to operate, secure, improve and monetise the website.
This Privacy Policy applies to visitors from the United Kingdom, European Union/European Economic Area, Switzerland, the United States and other countries where applicable.
This Privacy Policy should be read together with our Cookie Policy and the cookie/consent settings available on our website.
2. Data Controller
The person responsible for HackYourWay is:
Krzysztof Sajdak
Email:
HackYourWayStudio@gmail.com
For privacy-related questions, requests or complaints, please contact us using the email address above.
We are responsible for determining the purposes for which personal information is processed on HackYourWay, except where a third-party provider processes information independently under its own privacy policy or acts as a separate controller.
3. Information We May Process
3.1 Technical Information
When you visit HackYourWay, technical information may be processed automatically by our hosting provider, security systems, analytics services and advertising providers.
This may include:
- IP address;
- browser type and version;
- operating system;
- device type;
- screen or browser characteristics;
- approximate location derived from IP address;
- referring website;
- pages visited;
- date and time of access;
- technical information about interactions with the website;
- information relating to errors, security events or attempted abuse.
We do not use this information to directly identify you unless identification is necessary for a specific legitimate purpose or required by law.
3.2 Cookies and Similar Technologies
We may use cookies, local storage, scripts, tags, pixels and other similar technologies.
These technologies may be used for:
- essential website functionality;
- security;
- remembering preferences;
- consent management;
- analytics;
- advertising;
- measuring advertising performance;
- preventing fraud and abuse.
Non-essential technologies are subject to the consent requirements applicable in the relevant jurisdiction.
3.3 Course Progress
HackYourWay may use browser localStorage to remember course progress.
This information is stored locally in your browser and is intended to allow you to continue a course from where you previously stopped.
We do not intentionally transmit this course-progress information to our servers.
You can delete localStorage through your browser settings or by clearing the site’s stored data.
3.4 Information You Provide Voluntarily
If you contact us by email or otherwise voluntarily provide information, we may process the information you provide, including:
- your name, if provided;
- your email address;
- the contents of your message;
- attachments or other information you choose to send.
We use this information only for purposes such as responding to your enquiry, providing support, handling complaints or dealing with legal or administrative matters.
4. Why We Process Information
4.1 Operating the Website
We process necessary technical information to:
- provide website functionality;
- display pages and content;
- maintain website security;
- prevent abuse;
- diagnose technical problems;
- maintain website performance.
4.2 Analytics
Where you provide the required consent, we may use Google Analytics 4 to understand how visitors use HackYourWay.
Analytics may help us understand:
- which pages are visited;
- how visitors navigate the website;
- approximate engagement;
- technical errors;
- general website performance.
We use this information to improve the website and its educational content.
4.3 Advertising
HackYourWay is funded in part through advertising.
We may use third-party advertising services, including:
- Google AdSense
- Monetag
These services may use cookies, identifiers, scripts, tags or other technologies depending on the advertising format, consent status, browser, device and applicable advertising configuration.
Advertising technologies may be used for purposes including:
- delivering advertisements;
- selecting or personalising advertisements where permitted;
- measuring advertising performance;
- frequency management;
- fraud prevention;
- security;
- reporting and optimisation.
Where applicable under UK PECR, EU/EEA rules or other applicable law, non-essential advertising technologies are activated only after the required consent has been obtained.
5. Google Services
5.1 Google Analytics 4
We may use Google Analytics 4 to analyse website usage.
Google may process technical and usage information in accordance with Google’s own policies and contractual arrangements.
Analytics cookies are not intentionally activated where the applicable consent requirements require prior consent and that consent has not been provided.
More information is available in Google’s privacy documentation.
5.2 Google AdSense
We may use Google AdSense to display advertisements.
Depending on the user’s consent choices and applicable law, Google and its advertising partners may process information for advertising, measurement, fraud prevention and related purposes.
Where required, advertising-related storage and access technologies are used only after the relevant consent has been obtained.
If advertising consent is not provided, Google may use non-personalised or contextual advertising mechanisms where technically and legally available.
The exact behaviour depends on Google’s current systems, the consent signals provided by our consent management platform and the user’s browser/device configuration.
6. Monetag Advertising
HackYourWay may use Monetag as an advertising technology provider.
At the time of this policy’s publication, HackYourWay uses Monetag’s In-Page Push advertising format.
Monetag may process technical information and advertising-related information in connection with delivering, measuring, securing and optimising advertising.
Depending on the advertising technology used, this may include information such as:
- IP address;
- browser and device information;
- approximate geographic information;
- advertising identifiers or similar technical identifiers;
- information about interactions with advertisements;
- information necessary to prevent fraud or abuse;
- information used for advertising optimisation or measurement.
The actual information processed may vary depending on the advertising format, user’s device, browser, geographic location and Monetag’s current technology.
Where applicable law requires prior consent for the storage or access of information on a user’s device, the relevant advertising technology will be controlled by our consent mechanism.
Monetag may act as an independent controller for some processing activities. Users should also review Monetag’s own privacy information for details of its processing activities and available privacy controls.
7. Advertising Choices and Consent
We use a consent management mechanism to provide users with control over non-essential cookies and similar technologies.
Where applicable, users can:
- accept non-essential technologies;
- reject non-essential technologies;
- customise their preferences;
- withdraw or change consent later.
Consent is not inferred merely from continuing to browse the website.
Where consent is legally required, non-essential advertising or analytics technologies should not be activated before the required consent has been obtained.
The availability and behaviour of advertising may differ depending on the user’s country, device, browser and consent choices.
8. Consent Management Platform
Our website uses a Consent Management Platform (“CMP”) to record and communicate users’ consent preferences.
Where applicable, the CMP may use the IAB Transparency & Consent Framework (TCF) or other recognised consent mechanisms.
The consent record may contain information such as:
- consent status;
- purposes selected;
- date/time of consent;
- consent version;
- technical information required to demonstrate or enforce the user’s choices.
The CMP may communicate consent signals to participating advertising and technology providers where this is necessary to apply the user’s choices.
The CMP provider may have its own privacy policy and may process consent-related information as an independent controller or processor depending on the service and applicable arrangements.
9. Legal Bases for Processing
Where the UK GDPR or EU GDPR applies, our legal basis depends on the purpose of processing.
Consent — Article 6(1)(a)
We rely on consent where required for:
- non-essential analytics cookies;
- advertising cookies and similar technologies;
- certain tracking and personalisation technologies.
You can withdraw consent at any time through the website’s consent settings.
Legitimate Interests — Article 6(1)(f)
Where permitted by law, we may rely on legitimate interests for purposes such as:
- website security;
- fraud prevention;
- maintaining and improving website functionality;
- diagnosing technical problems;
- protecting our systems and users;
- managing the website.
We balance these interests against the rights and freedoms of individuals.
Legal Obligation — Article 6(1)(c)
We may process information where necessary to comply with legal obligations, including responding to lawful requests from competent authorities.
Contract or Requested Service — Article 6(1)(b)
Where applicable, we may process information where necessary to provide a service or respond to a request made by you.
10. Cookies and Similar Technologies
Strictly Necessary Technologies
These are required for core website operation, security and consent management.
Where an applicable legal exemption applies, consent is not required.
Analytics Technologies
Used to understand how visitors use the website.
These are subject to consent where required.
Advertising Technologies
Used by advertising providers such as Google AdSense and Monetag.
These may be used for advertising delivery, measurement, optimisation, fraud prevention and related purposes.
They are subject to the applicable consent requirements.
Local Storage
Used to save course progress locally in your browser.
You can remove this information by clearing the website’s stored data in your browser.
Because technologies and providers may change, the exact list of cookies and identifiers may also change.
11. Third-Party Providers
We may use third-party service providers, including:
- website hosting and infrastructure providers;
- Google Analytics;
- Google AdSense;
- Google Consent Mode;
- our Consent Management Platform;
- Monetag;
- security, performance and technical service providers.
These providers may process information according to their own privacy policies and contractual arrangements.
Some providers may act as processors on our behalf, while others may act as independent controllers for particular processing activities.
12. International Data Transfers
Some service providers used by HackYourWay may process information outside the United Kingdom or European Economic Area.
Where applicable, we take appropriate steps to ensure that international transfers of personal data are subject to a lawful transfer mechanism.
Depending on the provider and destination, this may include:
- an adequacy decision;
- the UK International Data Transfer Agreement or Addendum;
- EU Standard Contractual Clauses;
- another legally recognised transfer mechanism.
The exact transfer mechanism may depend on the provider, destination country and applicable law.
13. Data Retention
We retain information only for as long as reasonably necessary for the purposes for which it is processed, unless a longer period is required or permitted by law.
Examples include:
- consent information: according to the retention period configured by our CMP;
- analytics information: according to Google’s applicable retention settings;
- advertising information: according to the applicable advertising provider’s policies and technology;
- locally stored course progress: until you clear it or your browser removes it;
- correspondence: for as long as reasonably necessary to respond to the enquiry and maintain appropriate business or legal records.
14. Your Rights
Where the UK GDPR or EU GDPR applies, you may have rights including:
- the right to be informed about processing;
- the right of access;
- the right to rectification;
- the right to erasure;
- the right to restrict processing;
- the right to data portability;
- the right to object to certain processing;
- the right to withdraw consent where processing is based on consent;
- rights relating to automated decision-making and profiling where applicable.
These rights are subject to applicable legal conditions and exemptions.
To exercise a privacy right, contact:
We may need to verify your identity before responding to certain requests.
15. Right to Withdraw Consent
Where processing is based on consent, you can withdraw your consent at any time.
You can normally do this through the Cookie Settings control available on the website.
Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
16. Global Privacy Control
Where required by applicable US privacy law and supported by our consent management technology, we may recognise the Global Privacy Control (GPC) signal as a privacy preference or opt-out signal.
The exact effect of a GPC signal depends on the user’s jurisdiction and the technologies available on the website.
Where applicable, advertising and related processing may be restricted following a valid opt-out signal.
17. United States Privacy Rights
Certain US states provide additional privacy rights.
Depending on where you live and whether the relevant law applies, you may have rights such as:
- access to information about personal data processing;
- correction;
- deletion;
- portability;
- opting out of certain targeted advertising or sale/sharing activities;
- appealing certain privacy decisions.
We do not intentionally sell personal information in exchange for money in the ordinary meaning of the term.
However, advertising technologies may involve the disclosure or sharing of information with advertising providers for advertising-related purposes. Where applicable law treats such activity as a “sale” or “sharing”, we will provide the legally required opt-out mechanism.
Where required, we will honour recognised opt-out preference signals such as GPC.
18. Children’s Privacy
HackYourWay is not directed specifically at children.
We do not knowingly request or collect personal information from children for the purpose of creating user accounts or profiles.
If you believe that a child has provided personal information to us, please contact us so that we can assess the situation and take appropriate action where required by law.
19. Security
We take reasonable technical and organisational measures to protect information processed through the website.
These measures may include:
- HTTPS encryption;
- access controls;
- security monitoring;
- software updates;
- malware and abuse protection;
- hosting and infrastructure security measures.
However, no internet transmission or storage system can be guaranteed to be completely secure.
20. Third-Party Websites
HackYourWay may contain links to websites operated by third parties.
We are not responsible for the privacy practices, content or security of third-party websites.
You should review the privacy policy of any third-party website before providing personal information or interacting with it.
21. Changes to This Privacy Policy
We may update this Privacy Policy when:
- our services change;
- we introduce or remove third-party providers;
- our advertising or analytics configuration changes;
- legal or regulatory requirements change;
- our data-processing practices change.
When we make material changes, we will update the effective date and version shown at the beginning of this policy.
Where legally required, we will provide additional notice or obtain fresh consent.
22. Complaints
If you are located in the United Kingdom and believe that your personal information has been processed unlawfully, you have the right to complain to the Information Commissioner’s Office (ICO).
You can contact us first so that we have an opportunity to address your concern.
You can also contact the ICO through its official website.
If you are located in the EU/EEA, you may have the right to complain to the data protection authority in your country of residence or the place where you believe a breach occurred.
23. Contact
If you have questions about this Privacy Policy, cookies, advertising, consent or your privacy rights, contact:
Krzysztof Sajdak
HackYourWay
Email:
HackYourWayStudio@gmail.com
Website:
Last Updated: 10 August 2026
Version: 2.0
