In short: letzpwn.lu is a static website. It sets no cookies, runs no analytics or tracking, and loads nothing from third-party servers. The only data processed when you visit is the request log kept by our hosting provider.
Who is responsible
LetzPwn asbl, a non-profit association registered in Luxembourg, operates letzpwn.lu and is the controller for the data described on this page. You can reach us at info@letzpwn.lu.
What we collect ourselves
Nothing. The website consists of pre-built HTML, CSS, images and fonts. There are no accounts, no forms, no comment system, no advertising, and no analytics or tracking scripts of any kind. We do not build profiles of visitors and we have no way of recognising you across visits.
Cookies and local storage
The website sets no cookies and stores nothing in your browser's local storage. Because there is nothing to consent to, you will not see a cookie banner.
Third-party content
Every file the website needs — including the webfonts — is served from letzpwn.lu. No embedded fonts, scripts, videos, maps or social media widgets contact another company while you read a page, so no third party learns of your visit unless you click a link yourself.
Hosting and server logs
The website is hosted on GitHub Pages, a service of GitHub, Inc. Like any web server, it records technical data about each request in order to deliver the page and to keep the service secure and available. That typically includes your IP address, the time of the request, the page requested, and information your browser sends such as its user agent and referring page.
These logs are created and controlled by GitHub, not by us — we have no access to them and do not receive any statistics from them. GitHub is based in the United States; transfers are covered by its own safeguards and its GitHub Privacy Statement, including the section on data collection by GitHub Pages.
If you contact us
If you write to us by email, we process your address, your message and anything you choose to include, for the sole purpose of answering you. We keep such correspondence only as long as it is useful for that purpose, and we do not use it for anything else or pass it on.
Our community platforms
Our community lives on Discord, and we publish accounts on Twitter/X and Instagram. Those are separate services with their own terms and privacy policies: when you join or follow us there, the operator of that platform processes your data under its own rules, not ours. Within our own Discord server we only see what the platform shows any server moderator.
Your rights
Under the GDPR you have the right to access, rectify and erase your personal data, to restrict or object to its processing, and to data portability. Since we hold no visitor data, these rights are in practice only relevant to correspondence you have sent us — write to info@letzpwn.lu and we will handle it. For anything recorded in the hosting logs, please refer to GitHub's privacy statement linked above.
You also have the right to lodge a complaint with the Luxembourg supervisory authority, the Commission nationale pour la protection des données (CNPD).
Children
The website is open to everyone and collects no data, so it is safe for minors to read. Our community platforms have their own minimum age requirements, which we expect members to respect.
Links to other sites
Our pages, news posts and writeups link to external websites — CTF platforms, challenge write-ups, tools and social media. We have no control over those sites and take no responsibility for their content or their privacy practices. Their policies apply once you follow a link.
Changes to this policy
We update this page whenever the way the website works changes. The current version is from 16 August 2026; the full history is public in the repository of this website.
Contact
Questions or suggestions about this policy: info@letzpwn.lu or via our contact page.