Privacy Policy

Effective date: March 06, 2026

CyberCTF collects only the data needed to authenticate users, operate challenges, and maintain rankings. This policy explains what is collected, why it is collected, and how users can request changes.

Data We Collect

• Account data: username, email address, encrypted password hash
• Platform activity: challenge submissions, hint unlocks, ranking history
• Administrative records: moderation actions and platform announcements

How Data Is Used

• Authenticate users and secure sessions
• Calculate scores and render leaderboards
• Display notifications and challenge progress
• Detect abuse and protect platform integrity

Data Sharing

CyberCTF does not sell user data. Data is shared only when required for legal compliance, security response, or platform operation by authorized administrators.

Data Retention

Account and gameplay data are retained while an account is active. Deletion requests may be honored subject to security, legal, or abuse-investigation requirements.

Your Choices

• Request account data review or correction
• Request account deletion through administrator contact
• Use strong unique passwords to improve account security

Contact

For privacy requests: privacy@cyberctf.local