Privacy Policy

Last updated: March 05, 2025

Welcome to Blackbox, a bug bounty proof-of-concept tool operated by 0xspa.de. This Privacy Policy explains how we collect, use, store, and share your information when you interact with this demo application.

Scope of This Policy

Blackbox is designed solely for bug bounty testing and is not a production app. It exists to demonstrate vulnerabilities or security concepts within a controlled testing environment.

Information We Collect

We access minimal data when you authenticate via Google OAuth, specifically your basic profile information (e.g., name and email address) using the `profile` and `email` OAuth scopes. This data is collected only to simulate a login process for testing purposes. No additional personal data is requested or accessed.

How We Use Your Information

Your data is used exclusively to enable authentication and test basic functionality (e.g., displaying your name) as part of this bug bounty proof of concept. We do not use it for any other purpose beyond this testing scope.

Data Storage

We do not persistently store your data. Any information accessed via Google OAuth is held temporarily in memory during your session and is discarded immediately after you log out or the session ends.

Data Sharing

We do not share your data with third parties, except as required by law (e.g., in response to a legal request). This is a controlled testing tool, and no external entities receive your information.

Data Security

We implement reasonable measures to protect your information during testing, but as a proof-of-concept tool, Blackbox is not guaranteed to be fully secure. Use it at your own risk.

Changes to This Policy

We may update this Privacy Policy if our testing scope or data usage changes. If we modify how Blackbox uses Google user data, we will update this page and notify users by posting a prominent notice on our homepage (blackbox.0xspa.de) for at least 30 days before the changes take effect.

Your Rights

Since this is a temporary demo with no persistent data storage, we do not retain your information. If you have concerns about your data, contact us at admin@0xspa.de.

Contact Us

For questions about this Privacy Policy or Blackbox, email us at: admin@0xspa.de.

Back to Home