Acceptable Use Policy

1. Scope and Acceptance

This Acceptable Use Policy ("AUP") applies to all users of HackerDNA services ("Services"), including but not limited to labs, courses, writeups, rankings, profiles, and certificates.

This AUP supplements our Terms of Service and is incorporated therein by reference. In case of conflict, the more restrictive provision shall prevail.

By creating an account or using the Services, you acknowledge that you have read, understood, and agree to comply with this AUP. Continued use of the Services constitutes ongoing acceptance.

The Services are intended for users who are at least 15 years of age, in accordance with Article 45 of the French Data Protection Act (Loi Informatique et Libertes, loi n. 78-17). Users under 18 must use the Services under parental or guardian supervision.

2. Legal Framework and Ethical Use

HackerDNA is an educational platform dedicated to academic cybersecurity learning, professional career development, and Capture The Flag (CTF) competitions.

The Services are provided within a strictly educational and legal framework. You agree to use the Services in compliance with all applicable laws and regulations, including but not limited to:

• Articles 323-1 to 323-8 of the French Penal Code (computer offenses)
• The General Data Protection Regulation (EU Regulation 2016/679)
• The French Data Protection Act (Loi Informatique et Libertes, loi n. 78-17)
• The French Digital Economy Act (LCEN, loi n. 2004-575)

You shall not use the Services for the purpose of preparing, planning, or executing any illegal activity of any kind.

You shall not access any system, network, or data without the explicit written authorization of the owner, whether within or outside the platform.

You are solely responsible for your actions. Any illegal activity, including unauthorized access to computer systems (Articles 323-1 to 323-8 of the French Penal Code), is your personal liability.

HackerDNA reserves the right to report to the competent authorities any use of the Services that suggests illegal activity.

3. Lab and Machine Usage Rules

Labs and machines are isolated environments provided exclusively for learning purposes.

Permitted Use

You may use security tools and scripts within the scope of active lab exercises, consistent with the intended educational purpose of the Services.

Prohibited Conduct

• Attempting to escape the sandbox environment or access HackerDNA infrastructure
• Attacking or interfering with other users' lab instances
• Using lab machines as a launch point for attacks on external systems
• Exceeding allocated time limits or resource quotas through circumvention

Responsible Disclosure

If you inadvertently discover a vulnerability in HackerDNA infrastructure, you must report it immediately to [email protected]. Do not exploit, disclose, or test the vulnerability further.

4. Academic Integrity and Fair Play

The following activities undermine the educational purpose of the platform and are strictly prohibited:

• Sharing flags, solutions, or direct answers that bypass the learning process
• Using automated tools to harvest flags without understanding the underlying concepts
• Submitting flags or writeups that were shared or obtained through unauthorized means
• Manipulating rankings through multi-accounting, flag farming, or submitting flags obtained by others
• Impersonating another user or claiming their achievements
• Selling, transferring, or sharing access to your account

Writeup Guidelines

Writeups must not reveal flags from active (non-retired) machines. All writeups must be original work with proper attribution of sources and references.

5. Content Standards

All user contributions, including writeups and profile content, must not contain:

• Illegal, hateful, discriminatory, harassing, or defamatory content
• Doxxing or disclosure of third-party personal data
• Malware distribution or malicious code targeting production systems
• Stolen credentials, personal data, or confidential information
• Spam, unauthorized advertising, or promotional content
• Sexually explicit or violent content
• Terrorist content or content inciting the commission of offenses

All content must comply with French and European Union law. HackerDNA reserves the right to moderate and remove any non-compliant content without prior notice.

6. Platform Security and Integrity

The following activities targeting HackerDNA infrastructure are strictly prohibited, except within the scope of authorized lab exercises:

• Attacking, probing, or testing the security of HackerDNA infrastructure (website, APIs, databases)
• Intercepting communications between users or between users and the platform
• Denial-of-service attacks against any part of the platform
• Distributing malware through the platform
• Bypassing authentication, authorization, or access control mechanisms
• Spoofing origin or routing information

HackerDNA will actively cooperate with French, European, and international law enforcement authorities in the investigation of illegal activities. This cooperation may include the transmission of network information, usage data, and identification information.

By using the Services, you agree to cooperate with any such investigation.

7. Violations and Consequences

Violations of this AUP are subject to a progressive enforcement scale:

1. Warning - For minor violations or first-time offenses
2. Temporary restriction - Removal from rankings, suspension of writeup publishing privileges
3. Account suspension - Temporary suspension of access to labs and Services
4. Account termination - Permanent ban without refund for the remaining subscription period, in cases of fraud, illegal activity, or deliberate violation
5. Legal action - Reporting to competent authorities (police, CNIL, public prosecutor), civil and criminal proceedings

HackerDNA determines the severity of any violation at its sole discretion. Decisions may be appealed by contacting [email protected].

Indirect violations or violations committed through third parties are treated as direct violations.

Enforcement actions will be fair and proportionate, taking into account the nature of the violation, the impact on the Services and other users, and the user's history.

Modifications

HackerDNA may update this AUP at any time. Continued use of the Services after changes are posted constitutes acceptance of the updated policy.

Severability

If any provision of this AUP is found to be unenforceable, the remaining provisions shall remain in full force and effect.

Governing Law

This AUP is governed by French law. Any dispute arising from this AUP shall be submitted to the Tribunal Judiciaire de Bayonne, without prejudice to EU consumer protection rights.