Frequently Asked Questions

Can I use a VPN or Tor?

Yes. VPN and Tor connections are permitted when solving challenges and using the Platform. Some challenges may involve network-based targets; ensure your traffic is directed only at authorized challenge endpoints.

Can I stream or record while solving?

Yes, streaming and recording your solve process is welcome. Avoid revealing flags, complete solutions, or significant spoilers outside authorized areas. Special events may publish additional disclosure rules. Direct viewers to the official Solution thread for full write-ups after solving.

Can I publish write-ups?

Yes. Official Solution threads are the place for flags and full spoilers after you have solved the challenge. Educational content elsewhere is allowed if it does not reveal flags, complete solutions, or significant spoilers. See Challenge Rules.

Where can I share flags?

Flags and full solutions may be shared only in the official Solution thread for each challenge, after you have personally solved it. Do not publish or disclose flags anywhere else, including GitHub, YouTube, Discord, blogs, social media, private websites, or any other platform or communication channel. Attempting to obtain, leak, or distribute flags outside the intended process is also prohibited.

Can I attack the Hack n Roll platform?

No. Attacking Hack n Roll infrastructure, other users, or any system outside an authorized challenge environment is strictly forbidden. If you find a vulnerability, report it through our Responsible Disclosure process.

How do I report a vulnerability?

Email security@hacknroll.dev with a detailed description and reproduction steps. Do not exploit the vulnerability publicly or access other users' data. See Responsible Disclosure for full guidelines.

Can I use AI tools to solve challenges?

Yes. AI tools are allowed as a learning aid unless a specific challenge or event says otherwise. You remain responsible for following the Challenge Rules and for understanding and validating your own solutions.

Is automation allowed?

Yes, scripting and automation are allowed within authorized challenge environments, subject to our Challenge Rules (including the ban on brute-forcing challenge solutions and Platform authentication). Do not use automation to attack Platform infrastructure or disrupt service for other users.

Can I share an account or participate as a team?

Accounts are individual: each account must belong to one person. Credential sharing is prohibited. Teams may exist in future events with their own registration rules, but that does not change the one-person-per-account requirement for Platform accounts.

Is there a minimum age?

Yes. You must be at least 13 years old to use Hack n Roll. If you are under the age required by applicable law in your country to enter into a binding agreement, a parent or legal guardian must accept the Terms of Use on your behalf. Creating an account means you confirm that you meet these eligibility requirements.

How do I delete my account?

You may close your account from your account settings, or contact privacy@hacknroll.dev for assistance. Account deletion is permanent. Your account identity, credentials, sessions, challenge progress, and submissions are hard-deleted. Forum posts and comments remain with the anonymized author label "Deleted User". Moderation and audit records may be retained with anonymized actor/reporter references, as described in Data Retention.

Does Hack n Roll use analytics or tracking cookies?

We do not use advertising cookies or third-party analytics in the product. Hack n Roll uses only the authentication cookies required to keep you signed in. Infrastructure providers such as Cloudflare may set their own cookies outside our direct control. See our Cookie Policy and Privacy Policy.

Can I submit my own challenge?

Yes. Authors retain ownership of challenges they create. If a challenge is accepted and officially published, Hack n Roll receives a non-exclusive license to operate it on the Platform, with limits on republishing that challenge on other public CTF platforms, as described in Licensing and our Terms of Use.

Can I fork Hack n Roll?

Yes. AGPL v3 allows forks and modifications of the licensed platform source code, subject to the license requirements (including source availability for network services). Hack n Roll branding, official challenges, and other proprietary content are not included. See Open Source and Licensing.

Can I contribute code?

Yes. Contributions are welcome. Read Open Source and the contribution guidelines in each public repository before opening a pull request.

Where can I learn more?

• Terms of Use: legal agreement for using the Platform.
• Privacy Policy: how we handle personal data.
• Cookie Policy: authentication and provider cookies.
• Challenge Rules: what is allowed when solving.
• Community Guidelines: expected behavior in forums.
• Responsible Disclosure: how to report security issues.
• Data Retention: how long we keep data.
• Licensing: source code, challenges, and branding.
• Open Source: contributing and forks.
• Security: security practices and contact.
• About Hack n Roll: mission and values.