Legal · Privacy

Privacy without unnecessary tracking.

PentestMag collects the information needed to operate accounts, memberships, publishing, courses, support, and email delivery. We do not use email open pixels or click tracking for weekly updates.

Last updated: September 20, 2026

Weekly email open pixels

Weekly email click tracking

Stripe

Hosted payment processing

Information PentestMag stores

Account identifiers such as email address, display name, account status, and authentication/session records.
Membership, access-grant, subscription, invoice-related identifiers, and billing status needed to provide paid access.
Course progress, assessments, assignment submissions, certificate records, and learning activity.
Article/course editorial state, beta proposals, and administrative audit events.
Contact messages and account context needed to resolve support requests.
Email preference and suppression records needed to respect unsubscribe choices.

What we do not need

The native PentestMag platform is designed to avoid unnecessary campaign surveillance. Weekly PentestMag emails use simple HTML with SendGrid open tracking and click tracking disabled. We do not need an email pixel to decide whether you should retain access to something you purchased.

Why information is processed

To authenticate users and secure accounts.
To provide membership, Library, publication, and course access.
To process and reconcile payments and subscriptions.
To issue and verify course certificates.
To deliver requested service emails and weekly updates.
To investigate abuse, support requests, operational failures, and security incidents.
To maintain editorial workflows and audit important administrative changes.

Payment information

Stripe hosts the PentestMag checkout experience and handles supported payment methods, tax calculation, invoices, and subscription billing. PentestMag stores Stripe identifiers and billing state needed to connect your PentestMag account to the corresponding Stripe records; payment-card details are handled by Stripe rather than the PentestMag application.

Email delivery

SendGrid is used for service email such as passwordless sign-in, contact/support delivery, certificate delivery, and weekly PentestMag updates. Weekly updates include unsubscribe controls and do not enable SendGrid open or click tracking.

Retention and security

Records are retained for as long as they are reasonably needed for the service, security, accounting, legal obligations, access history, or dispute resolution. Retention periods can differ by record type.

PentestMag uses access controls, encrypted storage for supported administrator secrets, audit records, and other technical safeguards intended to reduce unauthorized access. No internet service can promise absolute security.

Your choices and rights

You can disable weekly updates using the email-preference controls.
You can cancel recurring Stripe billing through the available billing controls.
You may contact PentestMag to ask about personal information associated with your account or to request an appropriate correction or deletion, subject to legal and operational retention requirements.

Cookies and optional measurement

Essential cookies support sign-in and security. We store your cookie choices in this browser for 180 days, including when you reject optional cookies. If browser storage is unavailable, your choice applies to the current page only.

With analytics consent, Google Analytics measures site use. With separate marketing consent, Meta Pixel measures advertising and page visits. These providers can receive page URLs, browser and device information and use identifiers such as _ga (Google) and _fbp or _fbc (Meta). We do not add your account email or user ID to these tracking calls.

Optional tracking stays off until you choose to allow it. Use Cookie settings in the footer at any time to change or withdraw consent. Withdrawal stops further tracking through these integrations and removes their accessible first-party cookies; it cannot undo information already sent. Refusing optional cookies does not change account or paid-content access.

Privacy contact

For privacy questions or requests, contact [email protected]. For account, membership, course, or technical-support questions, use the PentestMag contact page.