Hackflix is a curated archive of public security-conference talks. This
notice explains the cookies we set and the data we store. We keep this
to the minimum needed to run the site — we do not sell data or use
advertising trackers.
Cookies and local storage
-
Session cookie (
hackflix-session) —
a strictly-necessary, signed, HttpOnly cookie. It keeps you logged in
to your account and is required for the site to function. No consent
banner is shown because the site sets no non-essential cookies of its own.
-
Theme preference (
st-theme) —
stored in your browser's local storage to remember your light/dark
choice. It never leaves your device.
Information you provide
-
Accounts — if you register,
we store your email address, your chosen username, and your password
(only ever kept as a bcrypt hash, never in plain text). Your email is
used to send an account-verification link.
-
Video reports — if you
report a video, we store the reason you give, the time, and the
IP address the report was submitted from. The IP address lets us
handle abuse and prevent a single source from flooding reports.
-
Site issue reports and ideas —
if you use the "Submit an issue/idea" page in the footer, we store
the description you submit, the time, and the IP address it came
from. The IP address is kept for the same reason — to correlate or
block abuse if the form is misused.
Third-party services
Some pages load content from third parties, which may set their own
cookies or receive your IP address:
-
YouTube — video pages embed
the YouTube player. When a video loads, YouTube (Google) may set
cookies and process your data under its own privacy policy.
-
Cloudflare — we use
Cloudflare Turnstile to tell humans from bots on the search, report,
and account forms, and Cloudflare's email service to send
verification emails.
-
Content delivery networks —
styling and fonts are loaded from the Tailwind CDN and Google Fonts.
Your choices and contact
You can browse without an account. If you have one, you can log out at
any time, and you can ask us to access or delete your account data by
emailing
[email protected].
For questions about this notice, use the same address.