Privacy
Last updated October 29, 2026 · Hijack the Site (hijackthe.site) is operated by Octal Codes · hello@hijackthe.site
Hijack the Site is operated by Octal Codes, which is responsible for your data (the data controller). We collect as little as we can.
What we store
- Account: your email address, your public display name and a salted hash of your password (never the password itself).
- Hijacks: your prompts, the generated pages, prices paid and dates. Your display name, prompts and pages are public in the hijack history.
- Payments: handled by Stripe. We never see or store your card number; we keep only the Stripe payment reference and the amount.
- Security: a login cookie, an anonymous visitor cookie for the "here now" counter, and IP addresses in short-lived rate-limit counters (deleted within a day) to stop abuse.
Who processes it
Cloudflare (hosting and database), Stripe (payments) and Anthropic (the AI that builds pages and reviews them; it receives your prompt and display name, not your email). We don't sell your data and we don't use ad trackers.
Your choices
Email hello@hijackthe.site from your account email to get a copy of your data or to delete your account. Deleting an account removes your email and password; past hijacks stay in the public history under your display name unless you ask us to anonymise them.