Skip to main content
HPI CYBERApplication Security

Privacy policy

What information is collected

When you submit a form on the site, the details you entered are stored: name, company or product, email address, phone if provided, the selected test type, timing and free-text message, as well as your consent to be contacted and whether you opted in to professional updates.

Operational data is also stored: a UTC timestamp, the page the form was sent from, campaign parameters (UTM) if present in the URL, the browser identifier (User-Agent) and a one-way hashed value of the IP address — to protect against automated submissions and abuse. The IP address itself is not stored in its original form.

Why the information is collected

To get back to you about your request, define a test scope and prepare a proposal. Professional updates are sent only if you explicitly checked the optional box for them, and you can ask to stop them at any time.

What not to send

Do not send passwords, API keys, tokens, access credentials, confidential screenshots or customer data through the form. Test access details are shared through a coordinated channel only.

Where the information is stored and who sees it

Requests are stored in a secure server-side database. The data cannot be read from the browser and is not displayed on the site. Access is limited to the HPI Cyber team for handling your request.

Site measurement

The site measures basic usage events (for example, clicking a call to action or submitting a form) to improve the site. These events don't include the personal details you entered. As of this page's publication, no third-party advertising or analytics systems are embedded on the site.

Retention and deletion

Requests are kept for as long as needed to handle the request and manage the business relationship. You can contact us to review, correct or delete the details stored about you.

Privacy inquiries

By email at info@hpi.school or by phone at +972-58-782-0920.

This document describes the actual practice on the site. It is not legal advice and is not a statement of compliance with any external standard or certification.

Get a Pentest Quote