Privacy Policy

Educational Purpose

YieldCat is an educational platform designed to simulate a high-yield bond trading system with intentional security vulnerabilities. This platform is for learning purposes only and should not be used with real financial data or transactions.

Information We Collect

  • Authentication credentials (email, password hash)
  • OAuth profile information when using third-party authentication
  • Platform usage data and security challenge attempts
  • Achievement progress and certificate information
  • Names and website links for people who consent to be mentioned in our Attributions and Acknowledgements

How We Use Information

  • To maintain your educational account
  • To track progress and generate achievements
  • To analyze platform usage and security challenge attempts
  • To improve the learning experience

Information Sharing

  • We do not share personal information with third parties
  • Platform usage statistics may be anonymized for research
  • Achievement certificates may be shared at user discretion
  • Attributions and Acknowledgements references are published individual consent.

Security Monitoring

  • All platform activities are monitored for educational purposes
  • Security incidents are logged and may be displayed to users
  • Vulnerability exploitation attempts are tracked and recorded

Data Retention

  • Account data is retained until account deletion
  • Achievement and certificate records are maintained indefinitely, only as irreversible SHA256 email hashes.
  • Platform usage logs are retained for 30 days

User Rights

  • Users may request account deletion at any time
  • Users may export their achievement data
  • Users may opt out of non-essential tracking via use of AdBlockers.