Privacy Policy

This policy covers the AetherGuard CTF platform only (ctf.aetherguard.xyz and ctf-management.aetherguard.xyz). It does not cover the main AetherGuard Technologies website or our other services, which have their own privacy policy.

What we collect

When you register a team, we store:

• Team name and the email address you provide
• A one way hash of your password. We never store your password itself and cannot recover it
• Optional team member names, if you choose to list them
• The IP address used to register, and the IP address attached to each flag submission
• Your flag submission history, including which challenges you attempted, whether each attempt was correct, and when

We do not use analytics scripts, advertising trackers, or any third party embeds on this platform. The only requests your browser makes are to ctf.aetherguard.xyz itself.

Why we collect it

This information exists to run a fair competition: to score teams correctly, to display the leaderboard and live feed, to enforce submission rate limits so one team cannot brute force flags, to investigate abuse or cheating reports, and to contact your team about the event if needed.

Cookies

We set one cookie, used only to keep you logged in to your team account. It is marked HttpOnly (JavaScript cannot read it), Secure (only sent over HTTPS), and SameSite=Strict. We do not set any advertising, tracking, or third party cookies. Because this cookie is strictly necessary for the site to function, there is nothing to opt out of, disabling it just logs you out.

Sharing

We do not sell or share your information with third parties. Event organizers and administrators can see team names, emails, submission history, and IP addresses through the management console, for the purpose of running the event and handling disputes or abuse.

Retention

Team and submission data is kept for the duration of the event and for a reasonable period after for scoring disputes and record keeping. You can ask us to delete your team's data after the event concludes by contacting an organizer.

Your rights

You can ask us what data we hold on your team, ask us to correct it, or ask us to delete it, subject to what is needed to keep the competition fair while it is running. Reach out to your event organizers to make any of these requests.

Changes

If this policy changes in a meaningful way, we will update the date at the top of this page.

Contact

Questions about this policy can be directed to your event organizers at AetherGuard Technologies.