Privacy

What we hold

• Your email address. It is how you sign in — there is no password. It is never shown to

other participants, and never appears on the leaderboard.

• Your display name. This is public. It is the only name others see.
• What you solved, when, and how far into multi-stage challenges you got.
• Hints you revealed and lessons you completed.
• Submissions you made, correct or not, with the IP address they came from. This is what makes

cheating detectable, and it is kept in an append-only log.

• Write-ups you submitted, and any score an operator gave them.

We do not run third-party analytics, advertising, or tracking of any kind. There are no external scripts on any page.

Cookies

Three, all first-party. A signed session cookie that keeps you logged in; a theme cookie; a language cookie. The last two are display preferences and carry nothing else.

The AI tutor

If an operator has enabled the tutor and you ask it for a hint, the lab's title, its written material, and how many hints you have already taken are sent to a third-party model provider to generate a response. Your email address and display name are not. If the tutor is not enabled on this instance, nothing leaves it.

Getting your data, and getting rid of it

Everything above is downloadable as JSON from your account page. Deleting your account removes your email address and display name immediately and signs you out everywhere.

Your solves stay, as an anonymous participant. This is deliberate: removing them would change other people's leaderboard positions and take away first-blood credits they earned, and those records are not only about you.