Privacy Policy

1. Introduction

ASRBD ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, store, and protect your information when you use our CTF platform website and platform services.

2. Data We Collect

We collect the minimum data necessary to provide our CTF platform services. This includes:

• Account Information: Username, email, display name, and password (securely hashed).
• Profile Data: Skill level, interests, and public challenge progress.
• Activity Data: Challenge submissions, scores, timestamps, and leaderboard position.
• Contact Data: Email address for notifications and support inquiries.
• Technical Data: IP address, browser type, device information for security and analytics purposes.

3. How We Collect Data

We collect data through:

• Direct Interactions: Registration forms, profile setup, and contact forms.
• Platform Usage: Challenge submissions, flag submissions, and platform interactions.
• Automated Technologies: Cookies, analytics, and server logs to improve platform performance and security.
• Third-Party Services: Information provided through authentication and payment processors.

4. How We Use Your Data

We use your personal data for:

• Creating and managing your CTF platform account
• Processing challenge submissions and calculating scores
• Displaying leaderboards and user statistics
• Sending platform notifications and updates
• Improving platform security and preventing abuse
• Analyzing usage patterns to enhance user experience
• Responding to your inquiries and support requests

5. Third-Party Services

We use the following services to operate our platform:

• Vercel: Web hosting and deployment. Standard access logs may be collected.
• Supabase: Database and authentication services with encryption and Row-Level Security.
• Formspree: Contact form processing. Refer to their Privacy Policy for details.
• Analytics Services: Usage analytics to improve platform functionality.

We do not sell your personal data to third parties. Third-party services are bound by confidentiality and data protection agreements.

6. Data Security

We implement industry-standard security measures to protect your data:

• Passwords are securely hashed using industry-standard algorithms
• HTTPS/TLS encryption for all data in transit
• Database encryption at rest
• Regular security audits and vulnerability assessments
• Limited access to sensitive data on a need-to-know basis

7. Data Retention

We retain your data for as long as your account is active. If you request deletion, we will remove your personal data within 30 days, except where required to retain it by law or for legitimate purposes (such as preventing fraud).

8. Cookies

Our platform uses cookies for:

• Authentication and session management
• Remembering user preferences
• Analytics and performance monitoring
• Security purposes (CSRF protection)

You can control cookie settings in your browser. However, disabling cookies may affect platform functionality.

9. Your Rights

Depending on your jurisdiction, you may have rights including:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data ("right to be forgotten")
• Portability: Request data in a machine-readable format
• Objection: Object to certain types of data processing

To exercise these rights, contact us at asrbd.org@gmail.com

10. Children's Privacy

The CTF platform is not intended for children under 13 years old. We do not knowingly collect data from children. If we discover we have collected data from a child under 13, we will delete it immediately.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify users of material changes via email or through the platform. Your continued use of the platform following changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this privacy policy or how we handle your data, please contact us at: