How They Hack You

Privacy Policy

Short version: this website sets no cookies, uses no tracking or analytics, and has no forms. The Scam Safety Check runs entirely in your browser. Your answers and your score are never stored and never sent to us or to anyone else.

1. Who is responsible

Benjamin Willert, Studio 35
Junkersstraße 35E, 38820 Halberstadt, Germany
Email: bw_ultron@proton.me

This is the "controller" under the EU General Data Protection Regulation (GDPR).

2. Hosting and server log files

This website is hosted by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA ("Cloudflare"). When you open a page, your browser automatically sends technical data to the provider's server, which the provider stores in log files:

This data is needed to deliver the website and to keep it secure and stable. The legal basis is our legitimate interest in running a secure website (Art. 6(1)(f) GDPR). Cloudflare keeps this data only for a limited time, as described in its privacy policy at cloudflare.com/privacypolicy. We do not combine it with any other data.

We have a data processing agreement with Cloudflare (Art. 28 GDPR).

Cloudflare may process data in the United States. The transfer is based on Cloudflare's certification under the EU-U.S. Data Privacy Framework and, where applicable, on the EU standard contractual clauses.

3. The Scam Safety Check

The check is a single page that works without a server. Your answers are processed only in your browser's memory while the page is open. They are not saved on your device, not placed in cookies or local storage, and not transmitted. When you close or reload the page, they are gone.

4. Cookies, tracking, fonts

We use no cookies, no analytics tools, no advertising pixels, and no embedded content from other providers. The fonts are built into the page, so your browser does not contact a font service.

5. Links to other websites

These pages link to Gumroad (to buy the e-book) and to Instagram. Nothing is sent to those services until you click a link. After that, the privacy policy of the respective provider applies:

6. When you contact us

If you write to us by email, we use your address and the content of your message only to answer you. The legal basis is our legitimate interest in answering inquiries (Art. 6(1)(f) GDPR). We delete the correspondence when it is no longer needed, unless the law requires us to keep it.

7. Our Instagram profile

When you visit or interact with our Instagram profile, Meta processes your data under its own privacy policy. We see your public profile name and what you comment or send us, plus anonymous statistics that Instagram provides.

8. Your rights

Under the GDPR you have the right to:

To use these rights, an email to the address above is enough.

9. No obligation, no automated decisions

You are not required to give us any personal data to use this website. We make no automated decisions about you. The score in the Scam Safety Check is calculated on your device and is only shown to you.

Last updated: November 2026