Privacy Policy

Last updated: 4 August 2026. Plain language, no legal filler — this is everything we collect and why.

What we collect

When you create an operative profile, we ask for:

• Email address — used only to send a one-time sign-in code and, occasionally, direct platform communications (e.g. a password-free login reminder). We do not sell, rent, or share it with advertisers.
• Callsign — the name you choose to appear on the public leaderboard. Don't use your real name if you'd rather stay pseudonymous.
• Country — shown only in aggregate on the country leaderboard.
• A 4-digit PIN — lets you log back in without re-verifying your email each time. It is not a password to any other account and is not used anywhere else.

As you play, we store your credits, streak, badges, and challenge results so your progress and rank persist between visits. Some game preferences (like your chosen skin) are saved locally in your browser, not on our servers.

What we don't collect

No payment information (the platform is free), no government ID, no location tracking beyond the country you tell us, and no third-party advertising or analytics trackers.

Who processes it

Your data is stored with Supabase (database hosting) and your sign-in email is sent via Resend (transactional email delivery). Both act only on our instructions and don't use your data for their own purposes. We don't share data with any other third party.

Your controls

• You can play a single practice challenge with no account at all.
• To update, export, or permanently delete your data, email support@otcyberarena.com from the address on your account — we'll act on it within a reasonable time.

Age requirement

OT CyberArena is intended for users aged 16 and over. We don't knowingly collect data from anyone younger. If you believe a minor under 16 has registered, contact us and we'll remove the account.

Cookies & local storage

We use your browser's local storage to remember your login session and display preferences on this device. We don't use tracking cookies or cross-site advertising identifiers.

Changes to this policy

If this policy changes materially, we'll update the date above and note it on the homepage.

This policy is a plain-language summary drafted for a small, self-run community project — it has not been reviewed by a lawyer. If you have specific compliance requirements (e.g. GDPR/CCPA obligations for your userbase), have it reviewed before relying on it as your sole privacy documentation.