Privacy
This page explains what happens to information you share with ExploitLabs through this website. ExploitLabs is a sole proprietorship (eenmanszaak) based in Amsterdam, the Netherlands, registered with the Chamber of Commerce (KvK) under number 75498863. ExploitLabs is the controller for the data described here. Questions can go to hello@exploitlabs.nl.
What this site does not do
This site sets no cookies, runs no analytics and loads no advertising or tracking scripts. Fonts and assets are served from this domain. If you switch between light and dark mode, that choice is stored in your own browser only and is never sent to us.
When you email us
This site has no forms. If you email us, we receive whatever you choose to send, typically your name, email address, company and a description of what you would like tested. We use it to respond to your request and, if we work together, to prepare an engagement. The legal basis is taking steps at your request before entering into a contract, and our legitimate interest in answering enquiries.
Who processes it
- Cloudflare hosts this website. Like any web host, it handles technical request data such as IP addresses to deliver and protect the site.
- Google Workspace hosts our email.
Some of these providers process data outside the European Economic Area. Where they do, transfers rely on the safeguards those providers offer, such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.
How long we keep it
If your enquiry does not lead to an engagement, we delete it within 12 months. If it does, the correspondence is kept for as long as needed for the engagement and for statutory record-keeping obligations.
Your rights
You can ask us for access to, correction of, or deletion of your data, or object to its use, by emailing hello@exploitlabs.nl. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Security issues
Found a vulnerability in this site? See security.txt for how to reach us, and use our PGP key for anything sensitive.