Skip to main content

Privacy Policy

Last Updated: August 8, 2026

This Privacy Policy describes how Fuzzing Hero LLC ("Fuzzing Hero", "we", "us", or "our") collects, uses, processes, and shares personal information when you use our website, application, documentation site, and associated security testing tools (collectively, the "Service").

We are committed to protecting the privacy and security of the personal information we process. Please read this Privacy Policy carefully to understand our practices regarding your data.

1. Information We Collect​

A. Information You Provide to Us​

  • Account Credentials: When you register for an account, we collect your name, email address, password, and optionally your organization details.
  • Billing and Payment Information: If you purchase credits or a subscription, our payment processor (such as Stripe) collects credit card details, billing address, and transaction details. We do not store raw card numbers.
  • Configurations and Target Information: We collect HTTP request collections, headers, API keys, credentials, target hosts, ports, paths, configurations, and other parameters you provide for fuzzing and scanning.
  • Communication and Support Data: If you contact us for support, abuse reports, or inquiries, we collect your email address, message contents, and attachments.

B. Information Collected Automatically​

  • Service Logs and Telemetry: We record actions you perform on the Service (e.g., launching scans, creating collections, updating settings), request parameters, client IP address, user-agent string, page views, and error logs.
  • Fuzzing and Scan Traffic Logs: During a scan, our engines generate test requests and capture responses from your target systems. This data includes request and response headers, status codes, and response payloads.
  • Cookies and Web Storage: We use cookies, localStorage, and similar technologies to maintain your session, store user preferences, and secure access.
  • Web Analytics: We use Cloudflare Web Analytics, an analytics tool that measures website usage without tracking individuals across sites or using client-side storage (like cookies).

2. How We Use Your Information​

We process your information for the following purposes:

  • Service Operation: To authenticate users, manage organizations, store scan configurations, and run automated fuzzing.
  • Billing Management: To process payments, deliver credits, and manage active subscriptions.
  • Security and Maintenance: To monitor system health, detect abuse or unauthorized scanning, troubleshoot errors, and secure data against unauthorized access.
  • Product Improvements: To analyze Service usage, optimize scan performance, and refine our vulnerability detection logic using aggregated, de-identified telemetry.
  • Communications: To send transaction confirmations, account updates, critical security notifications, and support responses.

3. How We Share Your Information​

We do not sell your personal information. We share information only in the following circumstances:

  • Service Providers: We share billing details, email delivery, and hosting information with trusted third-party providers (e.g., payment gateways, transactional email services) who perform services on our behalf.
  • Organization Members: If you join an organization, your account name, email address, scan configurations, and results will be visible to other members of that organization.
  • Legal Compliance & Safety: We may disclose information if required by law, subpoena, or to protect target owners, Fuzzing Hero systems, or the public from unauthorized, malicious, or abusive activities.
  • Business Transfers: We may transfer information in connection with a merger, sale of assets, or corporate acquisition, subject to confidentiality agreements.

4. Data Security & Retention​

A. Data Security​

We employ commercially reasonable technical and organizational measures to safeguard your information, including:

  • Encryption of API keys, credentials, and sensitive data at rest and in transit.
  • Restrictive access controls to limit internal access to production databases.
  • Regular security testing and vulnerability monitoring of our systems.

B. Data Retention​

  • Scan Configurations: Stored while your account or organization remains active, unless deleted by you.
  • Scan Results and Logs: Stored during your active account lifecycle. Detailed HTTP request/response recordings (HAR files) are stored for 180 days after scan completion.
  • Billing Records: Retained as required to comply with financial, tax, and legal obligations.

5. Your Rights & Choices​

Depending on your location, you may have rights under applicable privacy laws (such as GDPR, CCPA, or similar state/regional regulations), including:

  • Access and Portability: The right to request a copy of your personal data.
  • Correction: The right to update or correct inaccurate profile details.
  • Deletion: The right to request the deletion of your account and personal data, subject to legal and financial retention duties.
  • Object or Restrict: The right to object to specific processing purposes or request restriction of data processing.

To exercise these rights, please email us at [email protected].

6. Children's Privacy​

Fuzzing Hero is intended for professional, developer, and security testing use. We do not knowingly collect personal information from individuals under the age of 18.

7. Changes to This Privacy Policy​

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated version here or sending an email notification. The "Last Updated" date indicates the latest revision.

8. Contact Us​

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Fuzzing Hero LLC
Email: [email protected]