boroCTF Privacy Policy

1. Information Collected When you register for and participate in boroCTF, the following information is collected:

Account details: Username, email address, and school affiliation.

Verification documents: If you are eligible for a prize, we may request proof of high school enrollment (such as a school ID) to verify your status.

Technical data: IP addresses, timestamps, and connection logs generated when interacting with the competition platform.

Competition data: Flag submissions, challenge progress, and leaderboard rankings.

2. How Information is Used The collected data is used exclusively to operate the competition. This includes:

Organizing teams and managing the scoring system and public leaderboard.

Verifying high school eligibility for prize distribution. Any school IDs or verification documents provided will be reviewed solely for confirmation and deleted immediately after.

Monitoring infrastructure health and identifying unauthorized or malicious activity.

Communicating competition updates, technical issues, or prize distribution.

3. Data Sharing and Disclosure Personal information is not sold, rented, or shared with third parties. Data may only be shared if required by law or to investigate severe violations of the Terms of Service. Public leaderboards display team names and scores, but individual email addresses remain private.

4. Data Retention User data and competition logs are retained for the duration of the event and a short period afterward to finalize scoring, distribute prizes, and analyze competition metrics. After this operational period, sensitive personal information is securely deleted.

5. Security Standard industry practices are implemented to protect user data and competition infrastructure. Participants should practice good operational security, including using unique, strong passwords.