#Privacy Policy

1. Who we are

Security Exile (securityexile.com) runs this community platform and decides how your data is used. We collect as little as we can and never sell it.

2. What we store

• Account: your email, name and avatar from sign-in (handled by Clerk), and which provider you used (Discord, GitHub, email).
• Profile: your handle, bio, skills, XP and rank.
• Community activity: teams and roles, event registrations and rosters, war-room notes, writeups, comments, upvotes, hearts and bookmarks.
• Uploads: images you add to writeups.
• Security data: a log of privileged actions (audit log), invite-code attempts with a one-way hash of your IP address, and short-lived rate-limit counters.
• Technical logs kept by our host (Cloudflare) when you load a page.
• When the CTF arena and labs open, we will also store competition results and lab activity (which lab you launched and when). This policy will be updated before then.

3. Why we use it

• To run the platform and show your content and profile to the community (to perform our agreement with you).
• To keep the platform secure, prevent abuse and investigate reports (our legitimate interest).
• To send you service messages about your account or events you joined.

4. Who processes it

Clerk (sign-in and accounts) and Cloudflare (hosting, database, file storage) process data for us under their own security and privacy terms. If you sign in with Discord or GitHub, they share your basic profile with us. We don't use advertising or analytics trackers.

These providers may process data outside the UAE.

5. How long we keep it

• Account and profile: until you delete your account.
• Content you post: until you or a moderator delete it. A deleted comment leaves an empty placeholder so threads stay readable.
• Rate-limit counters: hours to a day.
• Invite attempts and audit log: up to 12 months, for abuse investigation.
• Database backups: up to 30 days.

6. Your rights

Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and similar laws, you can ask to access, correct or delete your data, object to or restrict its use, or receive a copy. Ask us on Discord or through the contact on /security and we'll reply within 30 days.

7. Cookies and local storage

We use only the cookies needed to keep you signed in (set by Clerk), plus your effects preference stored in your browser. No tracking cookies.

8. Children

The platform is not meant for children under 16 without a parent's or guardian's permission.

9. Changes

We'll update the date above and announce material changes on Discord.