root@thehacksparrow:~/writeups$ SYSTEM ONLINE
root@sparrow:~$ cat terms.txt

Terms of Service

Last updated: 27 July 2026

1. Who we are

The Hack Sparrow is operated by:

  • Legal name: Roberto Bou Poveda, trading as “The Hack Sparrow” (sole trader / autónomo under Spanish law — “The Hack Sparrow” is this website's brand name, not a separate registered company; the party you contract with is the natural person named here)
  • Tax ID (NIF): 46991671A
  • Registered address for notices: Calle Unic nº 7, 25798 Calbinyà, Les Valls del Valira, Lleida, Spain
  • Business activity: subscription-based cybersecurity education content
  • Not registered in Spain's Commercial Registry (Registro Mercantil): operates under the sole-trader / autónomo regime
  • Contact: thehacksparrow.com/contact or support@thehacksparrow.com

Spanish law (LSSI, art. 10) requires this identification to be published on any commercial website operated from Spain. These fields must be completed before accepting real payments.

2. Acceptance of these Terms

By creating an account, subscribing to Root Access, or otherwise using this site, you agree to these Terms of Service and to our Privacy Policy and Refund Policy. If you do not agree, do not use the site.

3. Eligibility

You must be at least 18 years old to create an account or purchase a subscription. By registering, you confirm you meet this requirement.

4. The service

The Hack Sparrow publishes cybersecurity writeups, cheatsheets, and tooling guides for educational and research purposes. Access is organized into two tiers:

  • User Access (free): a public base library of writeups, cheatsheets and tools.
  • Root Access (paid subscription): the full, unabridged library, released first.

What membership does not include: Root Access is access to published content. It does not include personalized support, one-on-one mentoring, on-demand hints for specific challenges, or guaranteed response times to questions. Product-related questions can be sent via the contact page and are answered on a best-effort basis, not as a service commitment.

5. Content is provided "as is"

Writeups describe techniques that worked against a specific target at a specific point in time. Target machines are later retired, patched, or removed by the platforms that host them (see below), and techniques that worked when published may stop working, or a platform may change how a machine behaves. Content is provided "as is" and "as available," without warranty that it is current, complete, or error-free.

6. No affiliation with HackTheBox, TryHackMe or similar platforms

The Hack Sparrow is an independent publication. It is not affiliated with, endorsed by, or operated by Hack The Box, TryHackMe, or any other platform referenced in its content. We are not responsible for the availability, content, pricing, or policies of those third-party platforms, nor for any consequence of your use of them.

7. Intellectual property & redistribution

All writeups, cheatsheets, guides and original tooling published on this site are the intellectual property of The Hack Sparrow unless otherwise credited. Root Access content is licensed to you for personal, individual use only. You may not republish, redistribute, scrape, mirror, or share paid content — in part or in full — outside your own individual account, whether or not for payment. We reserve the right to suspend accounts found doing so.

Public tools referenced on the site (including LAZARUS, REAPER and BANSHEE) are published separately and openly on GitHub under their own license; that license governs the tools themselves, not this Terms of Service.

8. Educational & ethical use

All content is published for educational and authorized-research purposes only. You are solely responsible for ensuring you have explicit authorization before applying any technique described on this site against any system you do not own or are not contractually authorized to test. We accept no liability for misuse.

9. Accounts

Accounts are authenticated via a one-time email link ("magic link") — there are no passwords to set, leak, or reuse. Keep access to the email address on your account secure, since it is the sole means of authentication. You are responsible for all activity under your account.

10. Payments & billing

Root Access subscriptions are billed monthly or annually in advance and renew automatically until cancelled. Payments are processed through Stripe, a third-party payment processor: Stripe handles the card transaction and PCI-compliant storage of your payment details, but Roberto Bou Poveda (the operator identified in Section 1) is the merchant of record for the sale — the seller, the party you are contracting with, and the party responsible for invoicing, VAT/tax treatment and consumer-protection compliance on this transaction. Refunds are reviewed and approved by us directly (see our Refund Policy), using Stripe's dashboard purely as a payment tool.

We will give reasonable advance notice by email before any price increase takes effect for existing subscribers.

11. Cancellation

You may cancel your subscription at any time from your account page or via the Stripe billing portal. Cancellation stops future renewals; it does not revoke access immediately — you keep Root Access until the end of the period you already paid for.

12. Refunds

Refunds, including the EU 14-day right of withdrawal, are governed by our Refund Policy.

13. Suspension & termination

We may suspend or terminate an account that violates these Terms — in particular the redistribution restriction in Section 7 — with notice where reasonably possible.

14. Changes to these Terms

We may update these Terms from time to time. Material changes will be notified by email or a notice on the site before they take effect.

15. Governing law & jurisdiction

These Terms are governed by Spanish law. Any dispute not resolved informally will be submitted to the courts of Lleida, Spain, without prejudice to any mandatory consumer-protection rights you have in your own country of residence as an EU, UK, US or other consumer, which these Terms do not waive.

16. Contact

Questions about these Terms: thehacksparrow.com/contact.