Privacy Policy
DEADFACE CTF ("DEADFACE CTF," "we," "us," or "our") values your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit, register for, participate in, or otherwise interact with DEADFACE CTF, including our websites, platforms, applications, and related services.
This Privacy Policy applies to information collected through:
- ›the DEADFACE CTF scoring platform
- ›the DEADFACE CTF website and related event pages
- ›associated event systems, registration forms, communications, and support channels
By using our services, you agree to the practices described in this Privacy Policy.
Who We Are
DEADFACE CTF is a cybersecurity Capture the Flag competition operated by Cyber Hacktics, a nonprofit organization focused on cybersecurity education, training, and community engagement.
Information We Collect
We may collect the following categories of information:
A. Information You Provide Directly
When you register for the event, contact us, submit forms, or participate in the competition, we may collect:
- ›name
- ›username or team name
- ›email address
- ›organization, school, or affiliation, if provided
- ›country or region, if provided
- ›communications you send to us
- ›writeups, submissions, flags, and other competition-related content
B. Competition and Platform Data
When you participate in DEADFACE CTF, we may collect:
- ›challenge solves and timestamps
- ›scoreboard activity
- ›team membership and ranking
- ›challenge submissions, including incorrect submissions
- ›technical logs related to platform use
- ›IP address
- ›browser type, device type, operating system, and similar usage metadata
C. Automatically Collected Information
When you use our websites or platforms, we may automatically collect:
- ›log data
- ›referring URLs
- ›page views
- ›session activity
- ›date and time of access
- ›cookie and similar tracking data
D. Optional Information
You may choose to provide optional information in connection with:
- ›volunteer applications
- ›sponsor inquiries
- ›surveys and feedback
- ›badge issuance or certification requests
- ›community participation, such as Discord or similar platforms
How We Use Information
We use collected information to:
- ›register users and teams
- ›operate and administer the competition
- ›verify eligibility and enforce event rules
- ›maintain scoreboards and challenge progress
- ›communicate event updates, support information, and announcements
- ›issue badges, certificates, prizes, or participation records
- ›investigate abuse, cheating, unauthorized activity, or policy violations
- ›improve the performance, security, and user experience of our services
- ›analyze participation trends and event effectiveness
- ›comply with legal obligations and protect our rights
Cookies and Similar Technologies
We may use cookies, session tokens, and similar technologies to:
- ›keep users logged in
- ›remember preferences
- ›maintain secure sessions
- ›understand site usage and improve functionality
- ›protect against abuse and fraud
You can usually control cookies through your browser settings, but disabling them may affect the functionality of the platform.
How We Share Information
We do not sell personal information.
We may share information in the following limited circumstances:
A. Service Providers
We may share information with vendors or service providers who help us operate the event, such as hosting providers, email services, registration tools, badge issuance platforms, analytics tools, or cloud infrastructure providers.
B. Public Competition Information
Certain information may be visible to other participants or the public as part of the event, including:
- ›username
- ›team name
- ›scoreboard position
- ›challenge solve activity
- ›writeups or public submissions you choose to share
C. Sponsors or Prize Partners
If prizes, badges, or sponsor-supported benefits are offered, we may share limited information necessary to administer those offerings, such as your name, email address, eligibility status, or shipping details, where applicable.
D. Legal and Safety Reasons
We may disclose information if we believe it is reasonably necessary to:
- ›comply with law, regulation, legal process, or lawful request
- ›enforce our rules, policies, or terms
- ›detect, prevent, or respond to fraud, abuse, cheating, or security issues
- ›protect the rights, safety, and property of participants, organizers, sponsors, or the public
E. Organizational Changes
If DEADFACE CTF or Cyber Hacktics undergoes a restructuring, merger, transfer, or asset-related transaction, information may be transferred as part of that process, subject to applicable law.
Data Retention
We retain information for as long as reasonably necessary to:
- ›operate and preserve event records
- ›maintain challenge and scoreboard history
- ›resolve disputes
- ›enforce policies
- ›satisfy legal, tax, accounting, or reporting requirements
We may retain aggregated or de-identified information for analytics, historical, educational, or archival purposes.
Security
We take reasonable administrative, technical, and organizational measures to protect personal information from unauthorized access, use, alteration, or disclosure. However, no system is completely secure, and we cannot guarantee absolute security.
Participants are responsible for safeguarding their account credentials and for using strong, unique passwords.
Children's Privacy
DEADFACE CTF is not directed to children under 13, and we do not knowingly collect personal information from children under 13 without appropriate authorization where required by law. If you believe a child has provided personal information inappropriately, contact us so we can review and take appropriate action.
If your event permits minors to participate, additional consent or supervision requirements may apply.
International Participants
DEADFACE CTF may be accessed by participants from multiple countries. By using our services, you understand that your information may be transferred to and processed in the United States or other jurisdictions where our service providers operate. Those jurisdictions may have data protection laws that differ from those in your location.
Your Choices and Rights
Depending on your location, you may have rights regarding your personal information, including the right to:
- ›access information we hold about you
- ›request correction of inaccurate information
- ›request deletion of certain information
- ›object to or restrict certain processing
- ›withdraw consent where processing is based on consent
We will consider and respond to requests as required by applicable law. We may need to verify your identity before fulfilling a request.
Third-Party Services and Links
Our websites or platforms may contain links to third-party websites, sponsor pages, community platforms, or tools. We are not responsible for the privacy practices, content, or security of those third parties. You should review their privacy policies separately.
Competition Integrity and Monitoring
To preserve fairness, security, and platform integrity, DEADFACE CTF may monitor platform activity, challenge interactions, submission behavior, and related technical logs. We may use this information to:
- ›detect cheating or rule violations
- ›investigate suspicious activity
- ›protect event infrastructure
- ›enforce scope and conduct rules
Participants should not expect privacy in activity that is publicly visible on scoreboards or that is necessary for competition administration and security.
Community Content
If you post messages, writeups, comments, or other content in public or community spaces associated with DEADFACE CTF, that content may be visible to others and may remain accessible even after the event ends. Please avoid posting sensitive personal information in public areas.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date above. Material changes may be communicated through the website, scoring platform, or other appropriate channels.
Your continued use of DEADFACE CTF after changes become effective constitutes acceptance of the revised Privacy Policy.
Contact Us
If you have questions about this Privacy Policy or our privacy practices, contact us at:
Cyber Hacktics / DEADFACE CTF