Privacy and Data Retention Policy

What Data We Collect

During the event, We may collect the following types of data:

1. Account and Registration Data

When creating an account on the CTFd platform, participants may be asked to provide:

• Username
• Email address
• Team name
• Password
• Optional profile information (e.g., Affiliation, Personal website)

An email address is required for account management and password recovery. A valid school email address is required to be eligible for prizes.

2. Automatically Collected Technical Data

While using the platform, the following technical data may be collected automatically:

• IP address
• Browser type and version
• Operating system information
• Time and date of access
• Pages visited on the CTFd platform
• Challenge flag submission logs
• Error messages and debug information

3. Challenge Interaction Logs

For the purpose of running and securing the competition, additional logs may be collected when interacting with challenge servers, including:

• Network traffic to challenge services
• Command input and application logs
• System logs from isolated challenge environments
• Access timestamps
• Connection metadata

These logs are used strictly for:

• Detecting abuse or cheating
• Debugging challenges
• Ensuring service availability
• Improving future events

4. Purpose of Data Collection

Collected data is used exclusively for:

• Running and administering the CTF event
• Authenticating participants
• Tracking scores and solving progress
• Preventing cheating or abuse
• Providing technical support
• Generating anonymized statistics
• Improving future competitions

Data will never be used for marketing purposes or sold to third parties.

5. Cookies and Local Storage

The CTFd platform uses cookies and local storage to:

• Maintain login sessions
• Store user preferences
• Provide essential platform functionality

Data Retention

All servers (except Discord server) are located in Toronto, Canada.
Participant data will be retained for 7 days after the event. After that period, the data will be deleted or anonymized for archival and statistical purposes.

Acknowledgment

By registering for and participating in the Langara CTF, you acknowledge that you have read and agree to this Privacy and Data Retention Policy.