Privacy Policy

Introduction

AppSec Arena ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application security training platform.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the platform.

Information We Collect

Personal Information

We may collect personal information that you voluntarily provide to us when registering:

• Username
• Email address
• Password (stored securely using bcrypt hashing)

Usage Information

We automatically collect certain information when you use the platform:

• Challenge submissions and attempts
• Progress and completion data
• Points and achievements earned
• Hints requested
• Time spent on challenges

Technical Information

• Browser type and version
• IP address (for security purposes)
• Session information

How We Use Your Information

We use the information we collect to:

• Provide and maintain the platform
• Track your learning progress and display achievements
• Generate leaderboards and statistics
• Personalize your learning experience
• Communicate with you about updates and features
• Ensure platform security and prevent abuse
• Improve our challenges and content

Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Password hashing using bcrypt with salt
• JWT-based authentication with secure token handling
• HTTPS encryption for all data transmission
• Input validation and sanitization
• Sandboxed execution of user-submitted code
• Regular security audits and updates

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. You may request deletion of your account and associated data at any time by contacting us.

Third-Party Services

Our platform may contain links to third-party websites and resources. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and data
• Export your progress data
• Opt-out of non-essential communications

To exercise these rights, please contact us at privacy@appsecarena.com

Children's Privacy

Our platform is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date. You are advised to review this privacy policy periodically for any changes.