Privacy Policy

01Data we collect

We collect only what is needed to run the waitlist, provide accounts, and improve the training missions.

• Waitlist details: the email address you submit, the plan you express interest in, and the page or campaign the signup came from.
• Account details: the email address and authentication identifiers held by our authentication provider, plus any display name you choose.
• Practice data: missions you open or complete, submitted findings, XP, streaks, and related progress records tied to your account.
• Technical data: IP address, browser and device type, and request timestamps, processed by our hosting provider to deliver and secure the site.
• Optional analytics: aggregated, privacy-respecting usage counts (such as page views and mission starts) where analytics is enabled.

02How we use data

• To email you about early access, launch timing, and the plan you registered interest in.
• To create and secure your account, save mission progress, and restore it when you sign in.
• To understand which missions and guides are useful so we can improve difficulty, pacing, and content coverage.
• To detect abuse, debug faults, and protect the service and its users.
• To meet legal, tax, and record-keeping obligations that apply to SecMissions.

03Legal bases

Where the GDPR or similar law applies, we rely on your consent for waitlist and marketing email, on performance of a contract to provide accounts and save progress, and on our legitimate interests to keep the service secure and to improve the product. You can withdraw consent at any time without affecting processing already carried out.

04Cookies and similar technologies

We use strictly necessary cookies to keep you signed in and to protect form submissions. If optional analytics is enabled, it is configured to avoid cross-site tracking and advertising profiles. We do not sell personal data and we do not run third-party advertising networks on this site.

05Service providers

We share personal data only with providers that process it on our behalf under contract, and only as needed to run the service.

• Supabase, for authentication, database storage, and the waitlist table.
• Our hosting and content delivery provider, for serving the site and logging requests.
• Our email provider, for sending early-access and account email.
• An analytics provider, where optional analytics is enabled.

06International transfers

Our providers may process data in countries other than yours, including the United States. Where required, transfers rely on Standard Contractual Clauses or another approved safeguard. SecMissions can provide details of the safeguards in place on request.

07Retention

Waitlist entries are kept until launch communications are complete or you ask to be removed, whichever is sooner. Account and progress data is kept while your account is open and for a short period afterwards to allow recovery, then deleted or anonymized. Security and request logs are kept on a short rolling window.

08Your rights

Depending on where you live, you may have the right to access, correct, export, restrict, or delete your personal data, to object to certain processing, and to complain to a supervisory authority. To exercise any of these rights, email hello@secmissions.com from the address associated with your record and we will respond within the period required by applicable law.

Every early-access email includes an unsubscribe link, which removes you from launch communications.

09Security

Data is transmitted over TLS and stored with access controls at the database level. Missions run against synthetic, simulated scenarios, so practicing on SecMissions does not expose live systems or real customer data. No service can guarantee absolute security, and you should use a unique password or a supported identity provider for your account.

10Children

SecMissions is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact hello@secmissions.com and we will delete it.

11Changes to this policy

If we make a material change we will update the effective date above and, where the change affects how we use data you already gave us, notify waitlist members and account holders by email before it takes effect.

12Contact

Privacy questions, requests, and complaints can be sent to hello@secmissions.com, addressed to SecMissions.