This page is written in plain language to explain ShiftZero's privacy practices. It may be updated as the platform evolves.
1. Introduction
We respect your privacy and try to collect the minimum amount of data needed to run ShiftZero and improve the experience. By using the platform, you agree to the privacy practices described here.
2. Data we may collect
The data we may collect falls into the following categories:
A) account data
- Name
- Email address
- Account picture, if you used google or uploaded one
- Sign-in method
- Internal user ID
B) profile data
- Professional title
- Bio
- Public location, if you entered one
- LinkedIn / GitHub / X / website links
- Public profile toggle setting
C) usage and progress data
- Specializations you've opened
- Tickets you've handled
- Attempts and decisions
- Scores and performance reviews
- Activity history and progress by role
D) feedback data
- Your rating of the experience
- Feedback you submit through feedback tools
- Please do not enter sensitive data or real secrets in your feedback
E) technical and analytics data
- Pages you visit
- Usage events such as opening a room or submitting an attempt
- Device or browser type when needed
- Technical errors to help us improve
3. How we use data
- Running your account and enabling access.
- Showing your progress and the analysts leaderboard.
- Generating educational reviews after attempts.
- Improving tickets and experience difficulty.
- Measuring platform usage and improving performance.
- Protecting the platform from abuse.
- Contacting you about access or important updates when needed.
4. Reviews and AI
ShiftZero may use automated or AI-assisted systems to review some attempts. This is used for educational and improvement purposes only.
- Do not enter passwords, API keys, or real company data in your notes.
- Reviews are educational feedback, not a formal assessment.
5. Public Profile
You can choose to enable a public profile that shows limited indicators of your progress, such as the number of completed tickets, average performance, specializations you've trained in, and some achievements.
The public profile does not show:
- Your email address.
- Your private notes.
- Your detailed answers.
- Private review details.
- Any sensitive data.
You can disable the public profile at any time from your profile settings, and the platform team may disable it for safety or moderation reasons.
6. Analysts Leaderboard
The analysts leaderboard may show your name, picture, rank, and limited progress indicators if you're eligible to appear on it. The leaderboard's goal is motivation, not a formal professional assessment.
9. Data Protection
We use reasonable technical and organizational measures to protect data, such as access controls and security policies. However, no digital platform can guarantee absolute security.
10. Data Retention
We retain data as long as necessary to run your account, improve the product, meet operational requirements, or handle feedback and support.
11. Your rights and choices
- Update your profile data.
- Disable the public profile.
- Remove or edit social links.
- Request help regarding your account.
- Request deletion of your account or data if operationally supported.
How some requests are fulfilled may vary depending on available operational capabilities.
12. Data you should not enter on the platform
Do not use ShiftZero to enter passwords, API keys, customer data, company secrets, real sensitive records, or any data you don't have the right to share.
13. Children's Privacy
ShiftZero is aimed at learners and cybersecurity enthusiasts, and is not intended for children below the legal age for using digital services in their country without appropriate consent.
14. Privacy Policy Updates
We may update this policy as ShiftZero evolves or adds new features. We'll show the last update date at the top of the page.
15. Contact
For any question about privacy, you can reach us through the contact channels available on the site.