Privacy notice and terms
Last updated: 4 November 2026
Who is responsible
These sites (h4ckd4d.com and rifleman.us) are operated by Christiano Bernardo Cruz, who is the data controller. The sites have no physical office. To exercise your rights, use the request form in your account and choose "Other", or reply to any email we send you.
What we collect
Account data: name, email, phone (optional), country, organization (optional) and a password stored only as a salted hash.
Requests: what you write in a service request or partnership request.
Access log: date and time, IP address, browser identifier, page or action, and your account when you are signed in. The log is kept to protect the service and the people who use it, and to answer legal requests.
Web shell tools (dig, ping, whois, headers, tls): the command you type runs on our server against the public host you name. We keep a usage counter per IP address (guests) or per account, and the command text: for signed-in accounts together with the access context, for guests in the server log.
Access context on account actions (sign-up, email confirmation, login, password reset and requests): the IP address, an approximate location (country, region and city) derived from the IP address, the browser language header, and a few coarse browser signals (time zone, language, screen size, platform, processor count). From these we compute a short device identifier. We do not ask for your precise location, we do not read your contacts, files or camera, and we do not use canvas, audio or font fingerprinting. This information is stored with your account and used only to detect account takeover, fraud and abuse. We also receive a security alert by email when these actions happen. Approximate location uses the IP database by DB-IP.com (CC BY 4.0) stored on our own server, so your IP address is not sent to a third party for this.
Why and on what basis
To create your account and answer your requests (performance of a contract or steps before one). To keep the sites secure and prevent abuse (legitimate interest). To comply with the law. Where consent is needed, such as access logging for the terminal, you give it when you create the account.
Who receives data
Data stays on servers operated by us. We use an email delivery provider to send confirmation messages. We do not sell data and we do not use advertising or tracking scripts. We may disclose data to the authorities when the law requires it.
How long we keep it
Account and requests: while the account exists and for the legal retention period afterwards. Access log and access context: up to 12 months, longer only when needed to investigate abuse or to meet a legal duty.
Your rights
Depending on where you live (for example under the LGPD in Brazil or the GDPR in the European Union) you can ask for access, correction, deletion, portability, and to object to or limit processing, and you can withdraw consent at any time. You may also complain to your data protection authority.
Terms of use
Use the sites lawfully. Do not attack, scan or overload them, do not try to reach other users' data, and use the terminal tools only on hosts you own or are allowed to test, and do not use any tool or information from the sites to harm, stalk or harass a person.
Services are provided by written agreement. Content on the sites is general information and not legal, medical or engineering advice for your specific case.
We may suspend or delete accounts that break these terms. Child-safety concerns must be reported to the authorities first.