DATA PROTOCOL

1.0 // MISSION STATEMENT

Privacy is a fundamental human right. CSI operates on a "Data Minimization" principle. We do not collect, store, or sell personal data unless explicitly required for security auditing, communication or any other legal purpose.

2.0 // DATA COLLECTION VECTORS

We may collect the following technical telemetry for security purposes:

• IP Address & User Agent: Logged automatically by our servers for DDoS protection and threat analysis.
• Cookies: Strictly necessary cookies only. We do not use third-party tracking pixels (e.g., Facebook, Google Ads).
• Communication Data: Emails sent to contact@your-domain.com are stored in encrypted servers (Proton/Gmail).

3.0 // USE OF INFORMATION

Any data collected is used strictly for:

• Identifying and blocking malicious traffic (Brute Force, SQLi attempts).
• Improving the performance of the CSI.
• Responding to security inquiries or Hall of Fame submissions.

4.0 // THIRD-PARTY INFRASTRUCTURE

To maintain high availability, we utilize the following trusted infrastructure providers:

• Hosting: Namecheap (Subject to their respective privacy policies).
• DNS: Namecheap
• Vulnerability Data: NVD (National Vulnerability Database) API.

5.0 // USER RIGHTS (GDPR/CCPA)

Regardless of your location, we extend GDPR-level rights to all visitors. You have the right to:

• Request a copy of any data we hold about you.
• Request deletion of your data ("Right to be Forgotten").
• Opt-out of any non-essential logging.

To exercise these rights, contact our Data Protection Officer (DPO) at: contact@your-domain.com