WikiCyber - Recent changes [en]

User:Testuser1234

Testuser1234 — Sat, 07 Nov 2026 05:50:45 GMT

User account Testuser1234 was created

User:CompWorkflowTest11070039

CompWorkflowTest11070039 — Sat, 07 Nov 2026 00:42:25 GMT

User account CompWorkflowTest11070039 was created

WikiCyber:Privacy policy

Maintenance script — Tue, 03 Nov 2026 22:38:20 GMT

Add privacy policy

New page

This policy explains what information WikiCyber collects, why, who can see it, and how long we keep it. WikiCyber is a free educational project operated by Shore-Roger Enterprises LLC, a California limited liability company ("we"). It supplements our [[WikiCyber:Terms of Use|Terms of Use]]. We do not sell personal information and we do not use it for advertising.

== Who this covers ==
Readers of the site, account holders (including Authors), and users of the Terminal Service and competitions. You must be at least 13 to hold an account (see Terms section 3.9). We do not ask for your date of birth.

== What we collect and why ==
'''Reading the site.''' Like any web server, ours keeps access logs (IP address, time, page, browser type). We use them to run and secure the site. They are kept for 90 days.

'''An account.''' A username and a password (stored only as a one-way hash). An email address, which we need for password resets, notices about your account, and, for the Terminal Service and competitions, to reach you; terminal and competition accounts must confirm it. Your sign-up IP address is recorded for competition accounts to help stop abuse. Please use a pseudonym instead of your real name, especially if you are under 18.

'''Contributions.''' Everything you publish, with your username, time and edit summary, is public and permanent in the page history. Drafts and sandboxes follow the visibility rules on the site.

'''The Terminal Service (practice labs and competitions).''' (See also Terms section 10.6.)
* Your account identifier, whether your email is confirmed, whether you accepted the current Terms, and the IP address your requests came from.
* Session records: when you queued, started and ended a session, how it ended, and its length. These sit in tamper-evident audit logs, and a copy is sent to a second server. Kept for one year.
* The virtual machine's console log, which can contain what you type and see, including anything you paste. Do not type or paste anything you do not want us to see. Kept for 90 days, or longer for a competition attempt that is under review.
* At the end of an attempt, a copy of the virtual machine's disk and the answers you typed. Practice copies are deleted after scoring. Competition copies are kept until the review and dispute period is over, 180 days after the results are published.
* Bookings, scores, and the organisers' review decision. Scores are shown only to you until the results are published; leaderboards may then show your username and score to the public.
* Practice sessions that were given outside network access go through our filtering proxy, which logs the destination, time and amount of data of each allowed or refused connection, not the content of encrypted traffic. Competitions never have network access.

'''Email we send you.''' Account and security messages, password resets, review notices, and, if you use competitions, booking confirmations, reminders and results. We do not send marketing.

'''Cookies.''' The login cookies MediaWiki needs, and a secure session cookie that connects your browser to your terminal session. No advertising or analytics cookies.

== Who can see it ==
* Everyone: your username, contributions, and any leaderboard entry.
* Our administrators and organisers, as needed to run, secure and review the site and competitions (for example, to investigate cheating or abuse).
* Our service providers, who process data on our behalf: Akamai Technologies, Inc. (Linode), which hosts the wiki; DigitalOcean, LLC, which hosts the Terminal Service; and our own private Git server that holds encrypted backups.
* Authorities, when the law requires it or to protect people. Where we are allowed to, we will tell you first.

== How long we keep it and your choices ==
We keep personal information only as long as needed for the purposes above and then delete or de-identify it, using the periods in brackets. We may keep security and audit records, bookings and published results longer where the integrity of a competition, the security of the service, or the law requires it. You can ask us to see, correct or delete information about you by writing to admin@wikicyber.org; we will do so unless we must keep it for those reasons. Published edits and leaderboard results are part of a public record and cannot always be erased; we can remove your name from them where we are able to.

== Children ==
You must be at least 13. If we learn that someone under 13 has an account, we deactivate it and delete the information we hold about them, apart from a one-way code of their email address that stops the same address registering again. Users under 18 should not share identifying details (surname, school, address, phone, photographs).

== Security ==
Access to the servers is limited to the people who run them; connections use HTTPS; backups are encrypted; the terminal sessions run in isolated virtual machines. No system is perfectly secure, and we will tell affected users if personal information is exposed.

== Changes and contact ==
We will post changes to this page and update the Last Updated date; for significant changes we will email account holders. Questions or requests: admin@wikicyber.org.

'''Last updated:''' 3 November 2026

WikiCyber:Terms of Use

Maintenance script — Tue, 03 Nov 2026 22:38:20 GMT

Minor update: accounts open from age 13 on self-confirmation (3.9); young-user protections (3.9(e))

← Older revision		Revision as of 22:38, 3 November 2026
Line 1:		Line 1:
	'''Effective Date:''' 31 October 2026  \|  '''Last Updated:''' ~~31 October~~ 2026		'''Effective Date:''' 31 October 2026  \|  '''Last Updated:''' 3 November 2026

	These Terms of Use (these "'''Terms'''") constitute a legally binding agreement between you and the Operator (as defined below) governing your access to and use of the WikiCyber website located at https://wikicyber.org, together with its pages, content, and related services (collectively, the "'''Site'''").		These Terms of Use (these "'''Terms'''") constitute a legally binding agreement between you and the Operator (as defined below) governing your access to and use of the WikiCyber website located at https://wikicyber.org, together with its pages, content, and related services (collectively, the "'''Site'''").

	'''PLEASE READ THESE TERMS, INCLUDING THE LIABILITY LIMITS IN SECTION 11 AND THE INDIVIDUAL ARBITRATION AGREEMENT IN SECTIONS 15.12–15.15. ARBITRATION REPLACES A COURT TRIAL FOR COVERED DISPUTES; YOU MAY OPT OUT WITHIN 30 DAYS AS EXPLAINED IN SECTION 15.15.''' You accept these Terms by checking an acceptance box or taking another affirmative action that expressly states that you agree to them after being given a conspicuous link and an opportunity to read them. Mere browsing does not, by itself, constitute acceptance of the arbitration agreement or other contractual waivers. Account creation, contributions, and Terminal Service access require acceptance. Publicly licensed Content remains available under its applicable license independently of acceptance. You must be at least 13 to use the Site; account ~~holders must meet~~ Section 3.9~~, including its parental-consent requirements where applicable~~.		'''PLEASE READ THESE TERMS, INCLUDING THE LIABILITY LIMITS IN SECTION 11 AND THE INDIVIDUAL ARBITRATION AGREEMENT IN SECTIONS 15.12–15.15. ARBITRATION REPLACES A COURT TRIAL FOR COVERED DISPUTES; YOU MAY OPT OUT WITHIN 30 DAYS AS EXPLAINED IN SECTION 15.15.''' You accept these Terms by checking an acceptance box or taking another affirmative action that expressly states that you agree to them after being given a conspicuous link and an opportunity to read them. Mere browsing does not, by itself, constitute acceptance of the arbitration agreement or other contractual waivers. Account creation, contributions, and Terminal Service access require acceptance. Publicly licensed Content remains available under its applicable license independently of acceptance. You must be at least 13 to use the Site or to hold any account. Section 3.9 explains how this is confirmed and what happens if it turns out not to be true.

	== 1. Introduction and Definitions ==		== 1. Introduction and Definitions ==
Line 63:		Line 63:
	'''3.6 One account; accurate information.''' Unless the Operator agrees otherwise in writing, each Author may hold only one account. The Operator may deactivate any additional or duplicate account. An Author must provide accurate information to the Operator (including the email address associated with the account) and must keep that information current. Accounts are personal to the Author and may not be shared, sold, lent, or transferred.		'''3.6 One account; accurate information.''' Unless the Operator agrees otherwise in writing, each Author may hold only one account. The Operator may deactivate any additional or duplicate account. An Author must provide accurate information to the Operator (including the email address associated with the account) and must keep that information current. Accounts are personal to the Author and may not be shared, sold, lent, or transferred.

	'''3.7 Authors' representations.''' By accepting an account, an Author represents and warrants that: (a) the Author is not circumventing a current suspension or removal, and has disclosed any prior suspension or removal when seeking renewed access; (b) the Author has authority to accept these Terms, subject to the ~~parental-consent procedure and~~ nonwaivable rights in Section 3.9, and doing so does not breach any other agreement or obligation by which the Author is bound (including any agreement with an employer, school, or competition organizer concerning ownership of, or confidentiality of, work product); (c) every statement the Author makes to the Operator in connection with the Author's invitation or vetting is true; and (d) the Author satisfies the eligibility requirements of Section 6.5 (Export Controls and Sanctions) and will promptly notify the Operator if that ceases to be true.		'''3.7 Authors' representations.''' By accepting an account, an Author represents and warrants that: (a) the Author is not circumventing a current suspension or removal, and has disclosed any prior suspension or removal when seeking renewed access; (b) the Author has authority to accept these Terms, subject to the nonwaivable rights described in Section 3.9, and doing so does not breach any other agreement or obligation by which the Author is bound (including any agreement with an employer, school, or competition organizer concerning ownership of, or confidentiality of, work product); (c) every statement the Author makes to the Operator in connection with the Author's invitation or vetting is true; and (d) the Author satisfies the eligibility requirements of Section 6.5 (Export Controls and Sanctions) and will promptly notify the Operator if that ceases to be true.

	'''3.8 Contributing on behalf of an organization.''' If an Author contributes to the Site in the course of employment or on behalf of a school, team, company, or other entity (an "'''Organization'''"), the Author represents that the Author is authorized to accept these Terms and to license the Contribution under the License on the Organization's behalf, and that the Organization agrees to be bound by these Terms. In that case, "you" refers to both the Author and the Organization, and the Organization is responsible to the Operator for any breach of these Terms by the Author in connection with that Contribution. An Author who is not so authorized must not submit the Contribution.		'''3.8 Contributing on behalf of an organization.''' If an Author contributes to the Site in the course of employment or on behalf of a school, team, company, or other entity (an "'''Organization'''"), the Author represents that the Author is authorized to accept these Terms and to license the Contribution under the License on the Organization's behalf, and that the Organization agrees to be bound by these Terms. In that case, "you" refers to both the Author and the Organization, and the Organization is responsible to the Operator for any breach of these Terms by the Author in connection with that Contribution. An Author who is not so authorized must not submit the Contribution.
Line 69:		Line 69:
	'''3.9 Minimum age.'''		'''3.9 Minimum age.'''
	:(a) '''Use of the Site.''' You must be at least 13 years old to access or use the Site. If you are under 13, you must not use the Site, and you must not create an account, submit any Contribution, or provide any personal information to the Operator. The Site is not directed to children under 13, and the Operator does not knowingly collect personal information from children under 13.		:(a) '''Use of the Site.''' You must be at least 13 years old to access or use the Site. If you are under 13, you must not use the Site, and you must not create an account, submit any Contribution, or provide any personal information to the Operator. The Site is not directed to children under 13, and the Operator does not knowingly collect personal information from children under 13.
	:(b) '''~~Author accounts~~.''' You must be at least 18 years old ~~(or the age of majority in your jurisdiction, if higher)~~ to hold ~~an Author~~ account, ~~except that a person who is at least 13 but has not reached that required age may hold~~ an Author account ~~only if the Operator has received~~, ~~directly from the person's parent or legal guardian and before the account is issued~~, ~~written consent to the account~~ and to ~~these Terms, in a form~~ the Operator ~~accepts, together with enough information~~ for ~~the Operator to~~ verify that the ~~consent is genuine. The Operator may refuse to issue an account to any minor~~, ~~and~~ a ~~vetting history or an invitation does not oblige the Operator to do so. The~~ parent or legal guardian ~~must separately accept these Terms~~ in ~~their own capacity and agree to supervise the minor's use; neither consent nor~~ these Terms waives rights that a minor ~~or guardian~~ cannot lawfully waive. ~~The~~ parent or legal guardian may ~~withdraw consent~~ at any time ~~by written notice~~ to the Operator, ~~upon which~~ the Operator ~~will~~ deactivate ~~the~~ account.		:(b) '''Accounts.''' You must be at least 13 years old to hold any account, including an Author account, a Competition Account, and access to the Terminal Service. The Operator does not ask for your date of birth and does not verify your age: you confirm that you are at least 13 when you sign up or accept these Terms. If you have not reached the age of majority where you live, you should read these Terms with a parent or legal guardian; nothing in these Terms waives rights that a minor cannot lawfully waive. A parent or legal guardian may ask the Operator at any time, using the address in Section 13.1, to deactivate a minor's account. For Author accounts, vetting and an invitation do not oblige the Operator to issue an account, and the Operator may refuse or deactivate any account at its discretion.
	:(c) '''Representation and enforcement.''' By accessing the Site or accepting an account, you represent that you meet the requirements of this Section 3.9. An Author must tell the Operator promptly if they are not, or cease to be, eligible. If the Operator learns that a person under 13 has used the Site or provided personal information, or that an account was issued in breach of this Section, the Operator may immediately deactivate the account and will take reasonable steps to delete the personal information it holds about that person, subject to legally required retention and the limited, lawful retention described in Section 10.8. The Operator will handle published material and associated personal information consistently with applicable child-privacy and deletion requirements; the License is not a basis for refusing a legally required removal.		:(c) '''Representation and enforcement.''' By accessing the Site or accepting an account, you represent that you meet the requirements of this Section 3.9. An Author must tell the Operator promptly if they are not, or cease to be, eligible. If the Operator learns that a person under 13 has used the Site or provided personal information, or that an account was issued in breach of this Section, the Operator may immediately deactivate the account and will take reasonable steps to delete the personal information it holds about that person, subject to legally required retention and the limited, lawful retention described in Section 10.8. The Operator will handle published material and associated personal information consistently with applicable child-privacy and deletion requirements; the License is not a basis for refusing a legally required removal.
	:(d) '''Age-related blocks.''' The Operator may block ~~an ineligible person's~~ registration, account, or access ~~to the affected services until they meet the applicable age and consent requirements~~, and may use the limited records described in Section 10.8 to help prevent repeat registrations ~~and circumvention during the block. For example, a 17-year-old who does not have~~ the ~~required parental consent may receive a~~ block ~~of up to one year where the applicable account age is 18. The duration must reflect the applicable eligibility requirements and available age information~~. A person may request review under Section 7.6 if their age information is incorrect ~~or they become eligible sooner, including through parental consent accepted under Section 3.9(b)~~. Expiry or removal of ~~an age-related~~ block does not ~~automatically~~ issue or reactivate an account or remove ~~a separate restriction imposed~~ under ~~these Terms~~.		:(d) '''Age-related blocks.''' The Operator may block the registration, account, or access of a person who is under 13, and may use the limited records described in Section 10.8 to help prevent repeat registrations while the block lasts. A person may request review under Section 7.6 if their age information is incorrect. Expiry or removal of a block does not by itself issue or reactivate an account.
			:(e) '''Protecting young users.''' Users who are under 18 are encouraged to use a pseudonym rather than their real name as their username, and not to post or type into the Terminal Service their surname, school, address, telephone number, photographs, or other identifying details, because usernames and scores can be shown publicly on leaderboards and wiki pages. You may not ask anyone you believe to be under 18 for personal information, and you may not publish personal information about a person you believe to be under 18. The Operator may remove any such material, and may suspend an account that does so, under Section 7.

	'''3.10 Inactive accounts.'''		'''3.10 Inactive accounts.'''
Line 236:		Line 237:
	:(h) '''Browser information.''' A necessary, secure session cookie that connects your browser to your one terminal session that expires according to its configured lifetime or is cleared on logout or explicit termination. Closing the browser or losing a connection need not immediately remove the cookie. The Operator does not use advertising or analytics cookies in the Terminal Service.		:(h) '''Browser information.''' A necessary, secure session cookie that connects your browser to your one terminal session that expires according to its configured lifetime or is cleared on logout or explicit termination. Closing the browser or losing a connection need not immediately remove the cookie. The Operator does not use advertising or analytics cookies in the Terminal Service.

	'''10.7 Terminal Service: use, sharing, and retention.''' The Operator uses the information in Section 10.6 to provide and secure the Terminal Service, to schedule, score, review, and publish Competitions, to prevent and investigate abuse and cheating, to keep the service running, and to meet legal obligations. The Operator shares it with service providers supporting the purposes described here and in the Privacy policy, including those identified in Section 10.3, with persons who run or review a Competition for the Operator, as required under Section 7.3, and, in the case of a leaderboard or published result, with the public as described below. Where results are published, your Site username, score, and rank may be shown to anyone who can see the page. Usernames on the Site are public (Section 10.2), so you should not use a username that you do not want connected to a published result. The Operator keeps the information in Section 10.6 for as long as it reasonably needs it for these purposes and for a Competition's review and dispute period, and may keep audit records, bookings, and published results for longer where the integrity of a Competition, the security of the Terminal Service, or the law requires. Retention must be limited to what is reasonably necessary and legally permitted, with deletion or de-identification when no longer needed; backup copies may persist until their scheduled rotation. The Privacy policy must state applicable retention periods or the criteria used to determine them. You may ask the Operator, at the address in Section 13.1, to access or delete information about you in the Terminal Service, and it will respond in accordance with applicable law, including any identity-verification requirements, response deadlines, and lawful exceptions. Published results and usernames may be removed or de-identified where required. Competition integrity alone does not override a statutory deletion right. The Terminal Service is not designed for the entry of sensitive personal information.		'''10.7 Terminal Service: use, sharing, and retention.''' The Operator uses the information in Section 10.6 to provide and secure the Terminal Service, to schedule, score, review, and publish Competitions, to prevent and investigate abuse and cheating, to keep the service running, and to meet legal obligations. The Operator shares it with service providers supporting the purposes described here and in the Privacy policy, including those identified in Section 10.3, with persons who run or review a Competition for the Operator, as required under Section 7.3, and, in the case of a leaderboard or published result, with the public as described below. Where results are published, your Site username, score, and rank may be shown to anyone who can see the page. Usernames on the Site are public (Section 10.2), so you should not use a username that you do not want connected to a published result. The Operator keeps the information in Section 10.6 for as long as it reasonably needs it for these purposes and for a Competition's review and dispute period, and may keep audit records, bookings, and published results for longer where the integrity of a Competition, the security of the Terminal Service, or the law requires. Retention must be limited to what is reasonably necessary and legally permitted, with deletion or de-identification when no longer needed; backup copies may persist until their scheduled rotation. The Privacy policy must state applicable retention periods or the criteria used to determine them. You may ask the Operator, at the address in Section 13.1, to access or delete information about you in the Terminal Service, and it will respond in accordance with applicable law, including any identity-verification requirements, response deadlines, and lawful exceptions. Published results and usernames may be removed or de-identified where required. Competition integrity alone does not override a statutory deletion right. The Terminal Service is not designed for the entry of sensitive personal information. For an account deactivated under Section 3.9, the Operator deletes the email address after sending the notice and keeps only a one-way keyed hash of it, which cannot be turned back into the address, so that the address cannot be used to sign up for a Competition again.

	'''10.8 Limited records for age-related blocks.'''		'''10.8 Limited records for age-related blocks.'''