Privacy Policy

Who we are. Core Hacking is operated by Rathore Co Solutions, Jaipur, India. This policy covers corehacking.in only. Courses are delivered on our Graphy-powered learning portal, which handles your account, payments and progress under its own privacy policy — this policy does not cover it.

What we collect, and only when you give it to us.

• Enquiries — name, email, optional phone, the track you picked, which course page you asked from, and your message.
• Refund requests — name, the email you bought with, the course, optionally your order reference and purchase date, the reason you chose, and what you tell us.
• Suggestions — what you suggest and why. Name and email are optional; leave them blank and we have no idea who you are.
• Membership waitlist — your email address, nothing else.
• Consultation bookings — handled by Calendly on our booking page, under Calendly's own privacy policy.

What we collect automatically. For every form submission and every error, we store a salted one-way hash of your IP address and your browser's user-agent string. We never store the raw IP. The hash cannot be reversed to an address; it exists so we can rate-limit abuse and tell one submitter from another. If the site crashes we also record what broke and which page you were on.

What we do not do. We do not sell or rent your data. We do not run advertising or third-party tracking pixels. We do not build a profile of you across sites. We do not put your email address in a URL.

Third parties that see your data.

Embedded videos use youtube-nocookie.com and load nothing until you click.

How long we keep it. Enquiries and refund requests are kept while they are open and for up to 24 months afterwards, so we can answer a follow-up. Waitlist entries are kept until the membership launches or you ask us to remove you. Crash reports are deleted once the bug is fixed.

How we use it. To answer you. If you opt in, to tell you about courses and batch dates — every such email has a one-click unsubscribe. We do not email you because you asked for a refund or left a suggestion.

Your rights. Email us to see, correct, export or delete anything we hold about you, or to withdraw consent. We action requests within 30 days. If you are not satisfied, you can escalate to the relevant data protection authority.

Security. Passwords are hashed with bcrypt. Submitter IPs are salted-hashed. Credentials are encrypted at rest. The site is served over HTTPS. No system is perfectly secure, and we will tell you promptly if something involving your data goes wrong.

Children. The courses are not aimed at under-18s, and we do not knowingly collect their data.

Security-training disclaimer. All offensive-security content is taught for defence, authorised testing and legal bug-bounty participation only. Attacking systems without written authorisation is a criminal offence. Core Hacking and Rathore Co Solutions accept no liability for misuse of course material.

Contact. Rathore Co Solutions · yogendrasinghrathore.in · or the contact form.