Privacy Policy

PWN-001 is a personal cybersecurity research and portfolio website operated by Roh4an, an independent cybersecurity practitioner based in Pakistan.

Website: https://pwn-001.xyz
Contact: [email protected]

This site is not a commercial service. It serves as a professional portfolio, research showcase, and knowledge-sharing platform.

We collect minimal information necessary to operate this website:

• ▸ Contact form data — when you voluntarily submit your name, email address, and message through the contact form. This data is used solely to respond to your inquiry.
• ▸ Server logs — standard web server logs including IP addresses, browser type, pages visited, and timestamps. These are retained for up to 30 days for security monitoring purposes.
• ▸ Session storage — a single browser session key (pwn001_intro_done) is stored locally to remember that you've seen the loading screen. This never leaves your browser.
• ▸ Analytics — if analytics are enabled, aggregated, anonymized page view data may be collected. No personally identifiable information is included.

We do not collect: financial information, government IDs, social security numbers, or any sensitive personal data.

Any information collected is used exclusively for:

• ▸Responding to contact form inquiries and collaboration requests
• ▸Maintaining website security and preventing unauthorized access or abuse
• ▸Understanding how the site is used in aggregate (no individual tracking)
• ▸Diagnosing technical issues and improving website performance

We will never sell, rent, trade, or share your personal information with third parties for commercial purposes.

This website uses minimal browser storage:

No third-party tracking cookies, advertising pixels, or cross-site tracking mechanisms are used. Session storage is cleared when you close your browser tab.

This website may use the following third-party services:

• ▸ Google Fonts — fonts are loaded from Google's CDN. Google's privacy policy applies to font delivery. No personal data is shared beyond the standard HTTP request.
• ▸ Cloudflare — the site may be served via Cloudflare's CDN for performance and security. Cloudflare may process request data per their privacy policy.
• ▸ GitHub — external links to GitHub profiles and repositories are provided. Visiting these links is subject to GitHub's privacy policy.

We are not responsible for the privacy practices of external websites we link to.

You have the following rights regarding any personal data we may hold:

• ▸Access — request a copy of any personal data we hold about you
• ▸Deletion — request that your data be deleted from our records
• ▸Correction — request correction of any inaccurate information
• ▸Objection — object to any processing of your personal data
• ▸Portability — request a portable copy of your data in a structured format

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

As a cybersecurity practitioner, security is taken seriously here. Measures in place include:

• ▸HTTPS-only access with TLS 1.3
• ▸Strict Content Security Policy (CSP) headers
• ▸No unnecessary data retention — server logs purged within 30 days
• ▸Contact form data is transmitted securely and not stored on public infrastructure
• ▸Regular security reviews of all deployed code and dependencies

No method of internet transmission is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

We reserve the right to update this Privacy Policy at any time. Changes will be reflected by updating the "Last updated" date at the top of this page.

Continued use of this website after any changes constitutes acceptance of the updated policy. We recommend reviewing this page periodically.

For material changes, we may post a notice on the website's main page.

For any privacy-related questions, concerns, or requests, please reach out:

We aim to respond to all privacy inquiries within 5–10 business days.