Privacy Policy

Cyber Security Finland Oy ("we", "us", "our") operates ZoneOfWar, a drone and autonomous-systems cyber range, at www.zoneofwar.com and app.zoneofwar.com. This policy explains what personal data we collect, why, and the choices you have. It applies to visitors of our marketing website and, where noted, to registered users of the ZoneOfWar platform.

1. Data we collect

Depending on how you interact with us, we may collect:

• Contact and account data: name, work email, organization, country, role, and password (hashed) if you create an account.
• Form submissions: information you provide through demo requests, academic access requests, newsletter sign-up or the contact form.
• Usage data: pages visited, referring source and general engagement events on the marketing site, collected only after you consent via the cookie banner.
• Platform activity: mission progress, scores and after-action data associated with your authenticated account. This data is kept separate from marketing analytics and is never used for advertising.
• Technical data: IP address, browser type and device information, collected for security and to keep the service running reliably.

2. How we use data

• To operate and improve the website and the ZoneOfWar platform
• To respond to demo, academic access and contact requests
• To send the newsletter, only to people who have opted in
• To maintain security, prevent abuse, and comply with legal obligations
• To understand aggregate site usage, only where you have given analytics consent

3. Legal basis (EEA / UK visitors)

Where the General Data Protection Regulation applies, we process personal data on the basis of consent (for analytics cookies and the newsletter), contract necessity (to provide an account or requested service), and legitimate interest (to respond to inquiries and keep the platform secure).

4. Cookies

We use essential cookies required for the site to function, and optional analytics cookies that are only set after you accept them through the cookie banner. You can change your preference at any time from the banner or by clearing your browser's local storage for this site. Mission and lab activity is never sent to marketing analytics tools.

5. Data sharing

We do not sell personal data. We may share data with service providers who help us run the website, email delivery, hosting and (for enterprise and academic customers) identity providers for single sign-on, under contracts that require them to protect your data. We may disclose data if required by law.

6. International transfers

Where personal data is transferred outside the EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or an equivalent legal mechanism.

7. Data retention

We retain contact-form and lead data for as long as needed to respond to your inquiry and for a reasonable period afterward for record-keeping, and account data for as long as your account is active plus a limited period required for legal and security purposes.

8. Your rights

Depending on your location, you may have the right to access, correct, delete or export your personal data, object to or restrict certain processing, and withdraw consent at any time. To exercise these rights, contact us at privacy@zoneofwar.com.

9. Children

ZoneOfWar is not directed at children under 16, and we do not knowingly collect personal data from them.

10. Changes to this policy

We may update this policy as the product evolves. Material changes will be reflected by the "Last updated" date above.

11. Contact

Cyber Security Finland Oy — Finland. Privacy inquiries: privacy@zoneofwar.com. Security reports: see our Security page.