Privacy.

hackerblue.dev is a set of static pages served through Cloudflare, which provides our DNS, TLS, content delivery and hosting. The site runs no analytics, no tracking scripts and no advertising. It loads no third-party content and sets no cookies for analytics or advertising.

Like any web host, Cloudflare processes technical request data — such as IP address, user agent and the page requested — to serve the site and protect it from abuse. It does this as our hosting and security provider.

With the upcoming release, buying a theme will run through Whop. Whop will collect the payment and contact details you provide at checkout, and handle receipts, tax, fraud checks and payment support. Signing in to Hacker Blue will also use Whop as the identity provider: Whop will confirm who you are, and Hacker Blue will receive your basic profile — your Whop account ID, email address, display name and avatar if you have one. Hacker Blue will never see your Whop password. Whop’s Privacy Policy applies to what Whop collects for its own purposes.

Hacker Blue will receive the order details needed to deliver a purchase and support it. We will not receive or store your full card number — card details stay with Whop and its payment partners.

With the upcoming release, a Hacker Blue account will be created when you sign in through Whop. Supabase Auth will hold the session that keeps you signed in: your browser will receive a session cookie, and the account pages will be served only to a signed-in session. That cookie is there to sign you in, not for analytics or advertising.

Your account will store your profile — your Whop account ID, email, display name, avatar if available, and when the account was created and last signed in — your purchases — the Whop payment reference, the product bought, amount, currency, status and date — and your licences — which Hacker Blue products you own and whether each is active. It will never store card numbers or your Whop credentials.

With the upcoming release, the HackerBlue CLI will generate a random device identifier for each installation — it is not derived from your hardware. To authorise a device we will store its name, operating system, architecture, CLI version, that identifier, a hashed device token, and when it was authorised and last seen. Hacker Blue does not collect serial numbers, MAC addresses or hardware fingerprints. An account can have up to three active devices, and you can deactivate one from your account page.

Theme releases will live in a private store and be served only to a signed-in, licensed account through an authorised device; the files will never be public. Serving a page, a download or an API request produces ordinary technical records — such as IP address, user agent and the time — in our logs, used to run the service, prevent abuse and investigate problems.

We do not sell personal information, and we do not share it for advertising or with data brokers. This site runs no mailing list and sends no marketing email.

• Cloudflare — DNS, TLS, content delivery and hosting for this website. In place today.
• Whop — checkout, payment processing, receipts and tax handling, and sign-in identity. Not in place until a theme is on sale.
• Supabase — authentication sessions, the account database (profile, purchases, licences and devices) and private storage for theme releases. Not in place until a theme is on sale.

No other company runs this site or sells these themes. There is no analytics provider, no advertising network and no email service attached to this site.

If you are in the EEA or the UK, you have the right to access, correct, delete, restrict or object to the processing of your personal data, and to receive it in a portable form. You also have the right to complain to your national data protection authority.

Where we process data, we rely on our legitimate interest in running and protecting this site, the performance of a purchase contract when you buy, and our legal obligations such as keeping tax records. Purchase and tax records are kept only as long as the law requires; account, licence and device data are kept while the account is active; technical request logs only as long as needed to serve and protect the site.

If you are a California resident, you have the right to know what personal information is collected, to delete it, to correct it, and to opt out of its sale or sharing. We do not sell or share personal information, so there is nothing to opt out of. You will not be treated differently for exercising a privacy right.

Hacker Blue has no email routing yet, so this site publishes no address. Contact explains the routes that exist: Whop can be reached about a purchase, and Whop’s help centre can pass a request to the seller. When Hacker Blue email routing is enabled, this page will carry the address for privacy requests.

This policy is dated 21 September 2026. If the stack that runs this site changes — a different host, a new checkout, an email address — this page changes with it.