Privacy Policy

The short version: this is a static, read-only website. There are no accounts to create, no forms to fill in, and no tracking cookies. The only data collected is anonymous, aggregated traffic counts through a cookieless analytics service, so I can see which pages people read. Nothing here identifies you personally.

What this site is

Hack Any Webapp is an informational site: a technical case study and patent-style disclosure written by Alexey Fedorov. Every page is prerendered and served as static content. The site does not run a login system, a comment section, a newsletter signup, or any form that asks you for personal information. If a page ever does ask for something, this policy will be updated to say so.

What gets collected

Aggregated analytics. The site uses Vercel Analytics, which is cookieless. It counts page views and derives coarse, non-identifying signals from each request: the page visited, the referring site, the country, and the general device type, browser, and operating system. It does not set tracking cookies, it does not build an advertising profile, and it does not store data that identifies you as an individual. Vercel computes a temporary, non-reversible hash to avoid double-counting a visitor within a day, then discards it.

Standard server logs. The site is hosted on Vercel. Like any web host, Vercel processes the requests needed to serve a page, which can include your IP address and basic request metadata, for operational and security purposes such as preventing abuse. I do not maintain a separate copy of these logs, and I do not use them to build a profile of you.

Cookies

This site sets no cookies of its own. The analytics described above are cookieless by design, so there is no consent banner because there is nothing to consent to on that front. If you have cookies in your browser from this domain, they did not come from this site.

Links to other sites

Several pages link out to GitHub repositories, to my personal site at alexey-fedorov.com, and to the web apps discussed in the case study. Once you follow a link off this domain, the destination's own privacy policy applies, not this one. I have no control over what those sites collect.

How the data is used

The aggregated analytics are used for one thing: understanding which pages get read and where readers come from, so I can improve the writing. The data is never sold, rented, or shared for advertising. I run no email marketing off this site and have no list to add you to.

Your choices

Because the site sets no cookies and stores nothing that identifies you, there is little to opt out of. If you would still rather not be counted, any content blocker or tracker-blocking browser will stop the analytics script from loading, and the site works exactly the same without it. If you believe any data relating to you has been processed and you want it addressed, email me at the address below and I will do what I reasonably can.

Children

This site is aimed at developers and security researchers. It is not directed at children, and it does not knowingly collect information from anyone, including children.

Changes to this policy

If the site ever starts collecting something it does not collect today, this page will be updated before that happens, and the effective date below will change. There is no account system, so the way to stay informed is to check this page.

Contact

Questions about privacy or this site go to alexey.max.fedorov@gmail.com. The site, the research, and this policy are all the work of Alexey Fedorov.

Effective date: June 16, 2026.