Privacy Policy

Last updated 14 November 2026

What we store

• Account data — username, email address, and a bcrypt hash of your

password. We never store your password itself.

• Progress — which flags you have captured, which labs you have launched,

your score, and the submissions you have made.

• Technical data — your IP address on sign-in, flag submission and

contact-form use, retained for abuse investigation only.

What we do not do

• We do not sell or share your data with advertisers.
• We do not run third-party tracking scripts or fingerprinting.
• We do not email you marketing unless you explicitly asked for it.

Machine access logs

When you launch a lab we record the connection string handed to you and the

time window of the session, so the operator can enforce the queue and investigate

misuse. These logs contain no packet capture and no keystroke recording.

Your rights

Ask us to export or delete your account at any time and we will do it within

seven days. Deleting an account removes your progress permanently; we cannot

recover it for you.

Contact

Privacy questions: use the contact form and choose Privacy.