Privacy Policy

1. Overview

Citizen Hack ("we", "us") operates citizenhack.me and the Citizen Hack client software. This policy explains what information we collect, why we collect it, and how it is handled. By creating an account or purchasing access you agree to this policy.

2. Information we collect

• Account data - username and email address you provide at signup. No personal information beyond this is required.
• Order data - payment records (plan, amount, gateway, timestamps) and the email used for the purchase.
• Access validation data - hardware identifiers (HWID), IP addresses, and client login records, used to validate subscriptions and prevent sharing or abuse of accounts.
• Usage analytics - anonymized page views via Google Analytics to understand how the site is used.
• Checkout analytics - a random browser-tab identifier, checkout steps, selected plan and payment method, referral hostname and campaign parameters. When signed in or creating an account during checkout, these events may be linked to your account ID; completed orders may be associated with them for reporting. The checkout tracker respects Do Not Track and Global Privacy Control.
• Email preferences and campaign results - your unsubscribe preference, messages attempted, unique offer-link clicks, and subsequent paid orders attributed to those links. For former forum members, we retain the forum name and email address to send discount invitations. We do not use email-open tracking pixels.

3. Why we collect it

To provide and secure your subscription: authenticate you, validate client access, prevent unauthorized sharing and fraudulent chargebacks, deliver updates, and support you when you contact us. We do not sell your personal information to anyone.

Access-ending, payment, verification and security notices are account-service emails. We may also email occasional CHM offers to account holders without active access, including accounts that never bought, and discount invitations to former forum members. Every marketing email has an unsubscribe link, and account holders can opt out any time under Account Settings. We use campaign click and purchase results to choose between reviewed messages and plan segments. Tracking links do not sign you in, and personal offer pages do not run Google Analytics.

4. Payments

Payments are processed by third-party providers (card/PayPal processors and cryptocurrency processors). We do not store full card numbers. Your payment details are handled under those providers' own privacy policies.

5. Cookies

We use essential cookies for login sessions and Cloudflare security, plus analytics cookies from Google Analytics. You can block analytics cookies in your browser settings without losing core functionality.

6. Data retention and deletion

Account and order records are kept while your account exists and for as long as required for payment and fraud-prevention purposes. Checkout analytics events older than 400 days are removed when the application starts. You can request deletion of your account data at any time by emailing us.

7. Security

Access to accounts is password-protected and the site is served over HTTPS. Hardware identifiers and login records are only used internally for access validation.

8. Contact

Questions about this policy or data requests: citizenhackmail@gmail.com.