The platform may process account data, competition activity, audit records, challenge interactions, lab lifecycle events and operational telemetry required to deliver the service securely and measure competition performance.

Data is used for account security, competition integrity, analytics, moderation, challenge quality improvement, platform performance, training effectiveness and operational response.

During challenge participation, the platform may record technical interaction signals such as challenge views, instance starts and stops, downloads, hint access, submission timing and similar bounded telemetry needed to improve performance, challenge quality, player experience and cybersecurity training insights.

PWN the room may analyze challenge and training data in aggregated and anonymized form to understand cybersecurity trends, challenge effectiveness and skill-development patterns. These analytics are designed to avoid unnecessary exposure of raw personal data and do not authorize public disclosure of participant credentials, secrets or challenge-sensitive material.

Secrets, raw credentials and challenge-sensitive material should not be exposed to public users. Access to administrative and analytical data remains role-restricted, logged and limited to legitimate operational, security and approved analytical purposes.