Privacy Policy

Application: SecNotes — Pentest Handbook (com.foor.secnotes.handbook)

Last Updated: October 10, 2026

Welcome to SecNotes — Pentest Handbook ("we", "our", or "us"), published by foor. We respect your digital privacy. This Privacy Policy discloses our data practices and outlines our compliance with Google Play Developer Policies and global privacy standards.

🔒 Zero Personal Data Collection Guarantee: SecNotes is an offline reference companion. It does not track you, does not show ads, does not collect telemetry, and never transmits your data over the internet.

1. Information We Collect and Process

A. Local On-Device Data Storage

The application functions completely offline. The following information is stored exclusively on your device's local sandboxed storage:

Bookmarks & Saved Cheatsheets: Any commands, articles, or methodology pages you bookmark for quick offline reference.
Local Application Preferences: Your choice of dark theme and policy acknowledgment state.

This data is stored solely in local application storage (AsyncStorage) on your device. We do not have servers, accounts, or databases that receive or process this information.

B. Information We DO NOT Collect

No personal identifiable information (name, email, phone number, physical address).
No location data (neither precise GPS nor coarse IP-derived location).
No advertising identifiers (AAID / IDFA).
No analytics, diagnostic beacons, or user behavior tracking.
No microphone, camera, contacts, or external storage access.

2. Third-Party Services and Advertising

SecNotes contains zero third-party advertising SDKs (such as Google AdMob or Unity Ads) and zero analytics SDKs (such as Firebase Analytics or Mixpanel). No third parties receive data from the App.

3. Device Permissions

The application requests minimal system permissions:

VIBRATE: Used solely to provide optional haptic confirmation feedback when copying a command snippet to your device clipboard.

The application does not request internet permissions for its core functionality and does not execute any background services.

4. Educational & Ethical Use Statement

SecNotes is provided solely as an informational, defensive, and educational reference guide for authorized cybersecurity auditing, Capture The Flag (CTF) challenges, and security research. The application does not contain automated exploitation engines or attack scripts that execute against external networks from the device.

5. Children's Privacy (COPPA Compliance)

SecNotes does not target children under the age of 13 and does not knowingly collect personal information from children. Because the App collects no personal information whatsoever, it fully conforms to the Children's Online Privacy Protection Act (COPPA) and international standards.

6. Your Data Rights (GDPR & CCPA/CPRA)

Under the European General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA):

Since we do not collect or store any personal data on remote servers, we do not sell, rent, or share personal data with third parties.
To delete all locally stored bookmarks and preferences, you can simply clear the application's data via Android Settings > Apps > SecNotes > Clear Storage, or uninstall the application.

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any updates will be published on this page with a revised "Last Updated" date.

8. Contact Us

If you have any questions or feedback regarding this Privacy Policy, please contact us at: foor.support@gmail.com