Privacy Policy

Privacy Policy for CTFROOM

At CTFROOM, accessible from https://ctfroom.com, one of our main priorities is the privacy and security of our users. This Privacy Policy document contains types of information that is collected and recorded by CTFROOM and how we use it.

If you have additional questions or require more information about our Privacy Policy, do not hesitate to contact us at [email protected].

1. Consent

By using our website and training platform, you hereby consent to our Privacy Policy and agree to its terms.

2. Information We Collect

The personal information that you are asked to provide is necessary for the creation and maintenance of your training profile:

• Account Information: When you register for an Account, we ask for your contact information, including items such as your name, company/organization name (optional), email address, and telephone number.

• Training & Performance Data: To provide our services, we collect data regarding your progress in labs, CTF flag submissions, badge earned, and leaderboard rankings.

• Direct Communication: If you contact us directly for support, we may receive additional information such as the contents of the message, attachments, and any other information you choose to provide to help us resolve your query.

3. How We Use Your Information

We use the information we collect to power the CTFROOM experience, including to:

• Provide, operate, and maintain our training platform and labs.

• Analyze Performance: Track your progress through "vaults" and simulations to award badges and certifications.

• Leaderboards: Display your username and rank on public or private leaderboards (where applicable).

• Security: Detect and prevent unauthorized access, "cheating" in competitive environments, or platform abuse.

• Communication: Send you technical updates, security alerts, and promotional information regarding new labs or events.

4. Log Files & Technical Data

CTFROOM follows a standard procedure of using log files. The information collected includes internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date and time stamps, and referring/exit pages.

Crucially for CTFROOM: We may also log specific interactions within our virtual lab environments (e.g., terminal commands or VPN connection logs) to ensure the stability of the simulation and to validate challenge completions.

5. Cookies

Like any other professional platform, CTFROOM uses 'cookies' to store visitors' preferences and session information. This ensures you stay logged in while navigating between labs and allows us to optimize the user experience based on your browser type.

6. Third-Party Privacy Policies

CTFROOM's Privacy Policy does not apply to other websites or tools you might use during training (e.g., external research links). We advise you to consult the respective Privacy Policies of these third-party sites. We do not sell your personal data to third-party advertisers.

7. GDPR & CCPA Data Protection Rights

We want to ensure you are fully aware of your data protection rights. Every user is entitled to:

• The right to access: Request copies of your personal and performance data.

• The right to rectification: Request that we correct any inaccurate information or complete incomplete profiles.

• The right to erasure: Request that we erase your personal data and training history under certain conditions.

• The right to data portability: Request that we transfer the data that we have collected to another organization, or directly to you.

If you make a request, we have one month to respond to you.

8. Children's Information

CTFROOM is a professional cybersecurity training platform. We do not knowingly collect any Personal Identifiable Information from children under the age of 13. If you believe your child provided this information on our website, please contact us immediately.