Privacy Policy

1. Introduction

NodeBreach ("we," "our," or "us") operates nodebreach.com (the "Platform"), a cybersecurity training platform that provides hands-on learning experiences through vulnerable virtual machines and gamified security challenges.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform. We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA).

By using NodeBreach, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information You Provide

• Account Information: Name, email address, username, password (encrypted), country selection
• Payment Information: Credit card details (processed securely by Stripe), billing address, transaction history
• Profile Information: Bio, avatar, cybersecurity skill level, learning preferences
• Communications: Support requests, feedback, survey responses, chat messages
• OAuth Information: When signing in via Google, GitHub, or other OAuth providers, we receive your name, email, and profile information as permitted by the provider

2.2 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent, click patterns, training node interactions
• Device Information: IP address, browser type, operating system, device identifiers, screen resolution
• Technical Data: Session IDs, API requests, error logs, performance metrics
• Access Logs: Console, SSH and VNC session metadata, node telemetry and interaction history for auditing and troubleshooting
• Training Activity: Nodes created, vulnerabilities exploited, flags captured, attacks launched, defense actions
• Location Data: Approximate geographic location based on IP address (country/region level only)

2.3 Cookies and Tracking Technologies

We use cookies, web beacons, and similar technologies to enhance your experience. See our Cookie Policy for detailed information.

3. How We Use Your Information

We use the information we collect for various purposes:

• To provide, operate, and maintain our Platform
• To improve, personalize, and expand our Platform
• To understand and analyze how you use our Platform
• To develop new products, services, features, and functionality
• To process your transactions and manage your subscription
• To communicate with you, either directly or through one of our partners, including for customer service, to provide you with updates and other information relating to the Platform, and for marketing and promotional purposes
• To send you emails and other communications
• To find and prevent fraud and security vulnerabilities
• For compliance purposes, including enforcing our Terms of Service, or other legal rights

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following situations:

• With Service Providers: We may share your information with third-party vendors and service providers that perform services for us or on our behalf, such as payment processing (Stripe), cloud hosting (AWS), and analytics (Google Analytics).
• For Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
• With Your Consent: We may disclose your personal information for any other purpose with your consent.
• For Legal Reasons: We may disclose your information if we are required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).

5. Data Security

We implement a variety of security measures to maintain the safety of your personal information. All payment information is encrypted via Secure Socket Layer (SSL) technology and processed by our payment partner, Stripe.

However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information.

6. Your Data Protection Rights

Depending on your location, you may have the following rights regarding your personal information:

• The right to access – You have the right to request copies of your personal data.
• The right to rectification – You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
• The right to erasure – You have the right to request that we erase your personal data, under certain conditions.
• The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.
• The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions.
• The right to data portability – You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

To exercise these rights, please contact us at privacy@nodebreach.com.

7. Children's Privacy

Our Platform is not intended for use by children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete such information.

8. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy, please contact us at: <a href="mailto:privacy@nodebreach.com">privacy@nodebreach.com</a>

• legal.privacy_policy.contact.email: privacy@nodebreach.com
• legal.privacy_policy.contact.support: support@nodebreach.com