Privacy Policy
This Privacy Policy describes how Binary Jiujitsu LLC ("we," "us," or "our") collects, uses, and protects information when you use the Binary Jiu-Jitsu platform at binaryjiujitsu.com (the "Platform"). By using the Platform, you agree to the practices described below.
1. Who Can Use This Platform
The Binary Jiu-Jitsu platform is intended for users who are 18 years of age or older. By creating an account or using the Platform, you confirm that you are at least 18 years old. We do not knowingly collect personal information from individuals under 18. If we become aware that a user is under 18, we will terminate their account and delete associated data.
2. Information We Collect
2.1 Information You Provide
- Account registration information: username, email address, and password
- Profile information you choose to add (display name, bio, avatar)
- Challenge submissions, solutions, and progress data
- Communications with us (support requests, feedback)
- Donation information — processed through third-party payment processors; we do not store payment card details
2.2 Information Collected Automatically
- IP address and general geographic location
- Browser type, operating system, and device information
- Pages visited, time spent, and navigation paths on the Platform
- Challenge attempts, scores, XP earned, and belt progression
- Session data and authentication tokens
- Error logs and diagnostic data
2.3 Information from Third Parties
If you authenticate via OAuth or social login (if offered), we may receive basic profile information from that provider as permitted by your settings with them.
3. How We Use Your Information
- To create and manage your account
- To operate the gamified learning platform, track your progress, and award belt ranks and XP
- To administer CTF competitions and leaderboards
- To process voluntary donations
- To send platform updates, security notices, and account-related communications
- To improve the Platform through analytics and usage patterns
- To detect and prevent fraud, abuse, and unauthorized access
- To comply with legal obligations
4. Data Storage and Security
The Platform is hosted on Google Cloud Platform (GCP). Your data is stored on GCP servers, which may be located in the United States. We implement reasonable technical and organizational security measures including encrypted data transmission (HTTPS/TLS), hashed password storage, and access controls.
No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.
5. Cookies and Tracking
We use session cookies and similar technologies to keep you logged in and to understand how the Platform is used. We do not use third-party advertising cookies. You can configure your browser to refuse cookies, but some Platform features may not function correctly without them.
6. Sharing Your Information
We do not sell your personal information. We may share information in the following limited circumstances:
- Service providers: GCP and other infrastructure vendors who process data on our behalf under confidentiality obligations
- Payment processors: For donation transactions (they receive only what is needed to process the payment)
- Legal compliance: When required by law, court order, or to protect the rights and safety of users or the public
- Business transfers: In connection with a merger, acquisition, or sale of assets, with notice to users
7. Public Information
Usernames, belt ranks, XP totals, and CTF leaderboard scores are visible to other users of the Platform. Do not use your real name as your username if you wish to remain anonymous on leaderboards.
8. Your Rights and Choices
- Access: You may request a copy of the personal data we hold about you
- Correction: You may update your profile information from your account settings
- Deletion: You may request deletion of your account and associated data by contacting us
- Opt-out: You may opt out of non-essential communications via account settings or by contacting us
To exercise any of these rights, contact us at legal@binaryjiujitsu.com.
9. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law or legitimate business interests (e.g., donation records for accounting purposes).
10. Third-Party Links
The Platform may contain links to external websites or resources. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any information.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of material changes via email or a prominent notice on the Platform. Continued use of the Platform after changes take effect constitutes acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at:
Binary Jiujitsu LLC
Email: legal@binaryjiujitsu.com
Website: binaryjiujitsu.com