Privacy Policy

This policy explains what information MY SERVER HACKED collects when you use this website, why we collect it, and what we do with it.

Who we are

This website is operated by MY SERVER HACKED LLC (Company registration details available on request).

Registered address: Registered address available on request via help@myserverhacked.com

For the purposes of applicable data protection law, the data controller is MY SERVER HACKED LLC, reachable at help@myserverhacked.com. You can reach us at help@myserverhacked.com.

What we collect

Information you submit

When you complete the emergency request form, we collect the information you choose to provide: your name, email address, and optionally your company, server IP or hostname, hosting provider, operating system, server type, incident timing, access details, severity, business impact, and your description of the incident.

We do not ask for and you should never submit passwords, private SSH keys, API tokens, cloud credentials, database passwords or other secrets.

Technical information

Our servers record standard request metadata, including IP address, timestamp and whether a request succeeded. IP addresses are used in memory for rate limiting to prevent abuse of the form. We do not write the contents of your form submission to application logs.

When you submit an incident request, the IP address and browser user agent the request came from are included in the notification email sent to our team. We use this to correlate your report with server-side evidence during an investigation and to identify abuse of the form.

Analytics

This website ships with no analytics enabled by default. If analytics is later enabled, it will be a privacy-respecting, cookie-free provider, and this policy will be updated to name it. Current status: Analytics is not currently enabled on this website. We set no tracking cookies and use no third-party analytics scripts.

Cookies

This website sets no cookies of its own. It does not use tracking cookies, advertising cookies or cross-site profiling.

How we use your information

• To respond to your incident request and communicate with you about it.
• To carry out the services you engage us to perform.
• To protect this website from spam and abuse.
• To meet legal or accounting obligations where they apply.

We do not sell your information, and we do not use it for advertising or profiling.

Legal basis for processing

Where the GDPR applies, we process your information on the basis of taking steps at your request prior to entering into a contract, performing that contract, and our legitimate interest in securing this website against abuse. We process your information to take steps at your request before entering into a contract and to perform that contract, and on the basis of our legitimate interest in protecting this website from abuse.

Where your information goes

Form submissions are not stored in a database by this website. They are validated and delivered by email to our team, then discarded by the web application.

We use the following third parties to operate the service:

• Resend — transactional email delivery. Your submission passes through Resend in order to reach us and to send your confirmation email.
• Hosting and network providers — Our current hosting, email and network providers are listed on request via help@myserverhacked.com.

A full list of subprocessors, their locations and the safeguards applied to any international transfers: We use Resend for transactional email. A current list of subprocessors and the safeguards applied to any international transfer is available on request via help@myserverhacked.com.

How long we keep it

Incident correspondence is retained in our email systems for as long as needed to provide the service and to meet legal or accounting obligations. We keep incident correspondence for as long as needed to provide the service and to meet legal and accounting obligations, and delete it when neither applies. You can request deletion at any time by emailing help@myserverhacked.com.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to our processing of your information, and to receive a copy of it in a portable format. To exercise any of these rights, email help@myserverhacked.com.

If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection authority. Contact us first at help@myserverhacked.com and we will try to resolve the issue directly.

Security

This site is served over HTTPS and applies security headers including a Content Security Policy and HSTS. The form is protected by server-side validation, rate limiting and spam controls. No system is perfectly secure, but we take the handling of incident information seriously.

Changes to this policy

We may update this policy as the service develops. The date at the top of this page reflects the most recent revision.

Contact

Questions about this policy: help@myserverhacked.com