Privacy Notice

Summary

We collect the minimum information required to review a research submission or respond to an enquiry. We treat submissions as confidential, we do not sell personal information, and we retain it only as long as necessary for evaluation, legal, or compliance purposes.

Information we collect

• Submission details you provide: your name, alias, or team name; a contact channel; the affected technology; the affected product or family; your high-level research description; and any disclosure history you choose to share.
• Correspondence arising from that submission or from an enquiry you send us.
• Basic technical data generated by visiting this website, such as the pages requested and general device or browser characteristics, where collected by the hosting infrastructure for security and availability purposes.

We do not ask for, and you should not send, live exploit code, credentials, personal data belonging to others, or information obtained through unauthorised access at the initial submission stage.

Why we use it

• to review and evaluate a submission you have sent us;
• to respond to your enquiry and communicate about next steps, including confidentiality agreements;
• to meet legal, record-keeping, export-control, and compliance obligations;
• to protect the security and integrity of our program and website.

Confidentiality of research

Research descriptions are treated as confidential. Access is limited to those involved in review and evaluation. We do not disclose a submission to any third party except where necessary for evaluation under confidentiality obligations, where you have authorised disclosure, or where we are required to do so by law or a competent authority.

Sharing

We do not sell, rent, or trade personal information. Information may be shared with professional advisers, service providers supporting our operations, or counterparties to an engagement, in each case under appropriate confidentiality and only as needed. It may also be disclosed where required by law or to establish, exercise, or defend legal claims.

Retention

Submissions and related correspondence are retained for as long as needed to complete evaluation, to satisfy contractual and legal obligations, and to maintain appropriate records. Information that is not required is deleted or anonymised.

Security

We apply organisational and technical measures appropriate to the sensitivity of the information we handle, including restricted access, controlled communication channels, and, where appropriate, written confidentiality agreements before sensitive technical material is exchanged. No method of transmission or storage is entirely secure, and we cannot guarantee absolute security.

International transfers

We operate from the United Arab Emirates and may handle information in other jurisdictions where our team, advisers, or service providers are located. Where information is transferred, we take steps to ensure it continues to receive appropriate protection.

Your rights

Subject to applicable law, you may request access to, correction of, or deletion of personal information we hold about you, or ask us to restrict or object to certain processing. Requests can be made through the contact channel on the main site. We may need to verify your identity and may retain certain records where the law requires it.

Cookies and local storage

This website does not use advertising or profiling cookies. Your browser’s local storage may be used on your own device to hold a submission summary you have generated, so that nothing is lost before a submission channel is confirmed.

Changes

We may update this notice from time to time. The date at the top of the page reflects the most recent revision.