Privacy Policy

1. Introduction

ASRBD ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website (regardless of where you visit it from) and tell you about your privacy rights.

2. The Data We Collect About You

We adhere to the principles of data minimization. We may collect, use, store and transfer different kinds of personal data about you which we have grouped together follows:

• Identity Data: includes first name, last name, username or similar identifier.
• Contact Data: includes email address (when using our contact form).
• Technical Data: includes internet protocol (IP) address, browser type and version, time zone setting and location.

3. How Is Your Personal Data Collected?

We use different methods to collect data from and about you including through:

• Direct interactions: You may give us your Identity and Contact Data by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes the data submitted using the Formspree contact form.
• Automated technologies: For improving our website, we may collect technical data through optional cookies and analytics. You can set your browser to refuse all or some browser cookies.

4. Third-Party Services

We use Formspree to process form submissions. Formspree acts as a data processor for the data you enter into the contact form. Please refer to Formspree's Privacy Policy for more information on how they handle your data.

Our web hosting is provided by Vercel, which may collect standard access logs (like IP addresses and user agents) for the purpose of serving content securely.

If our CTF Arena is accessed, separate authentication may be done via Supabase Auth. Data collected for the CTF is isolated securely via Row-Level Security rules.

5. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. Access to your personal data is limited to those members of ASRBD who have a business need to know.

6. Your Legal Rights

Under certain circumstances, you have rights under data protection laws (such as the GDPR) in relation to your personal data. These include the right to:

• Request access to your personal data.
• Request correction of your personal data.
• Request erasure of your personal data.
• Object to processing of your personal data.

If you wish to exercise any of the rights set out above, please contact us.

7. Contact Details

If you have any questions about this privacy policy or our privacy practices, please contact us at: asrbd.org@gmail.com