1. Eligibility

• 1.1. The competition is open to all participants from the following countries
•  Belgium
•  Estonia
•  Finland
•  France
•  Germany
•  Italy
•  Ireland
•  Lithuania
•  Luxembourg
•  Netherlands
•  Spain
•  Switzerland
•  United Kingdom

 2. Registration

• 2.1. Participants must register for the competition on challenge-ecw.eu.
• 2.2. Each participant must provide accurate and complete information during registration.
• 2.3. Each participant is allowed to create only one account, or be subjected to disqualification.
• 2.4. Students must register with an e-mail address managed by their school.

 3. Conduct

• 3.1. Participants are expected to maintain a high level of sportsmanship and fair play throughout the competition.
• 3.2. Any form of cheating, including but not limited to plagiarism, unauthorized collaboration, or attempting to exploit vulnerabilities in the competition platform, will result in immediate disqualification.

 4. Competition Format

• 4.1. This event lasts from October 17, 2024 at 2 p.m. to October 27, 2024 at 5 p.m..
• 4.2. The competition will consist of a series of challenges related to cybersecurity and hacking.
• 4.3. Challenges will be tagged with an estimated difficulty level by the authors.
• 4.4. Challenges value will decrease depending on validations.
• 4.5. Participants will only earn points for successfully completing challenges (no firstblood, etc).
• 4.6. At the end of the event, the best 60 students players in the various categories will be selected as follows:
  • 48 best ranked students
  • 12 best ranked European (non French) students - completed by French students if needed
• 4.7. Each school or educational institution is allowed to register a maximum of 2 teams for the competition. This rule is in place to encourage diversity and fair representation from different schools.

 5. Scoring

• 5.1. Scoreboards will be provided on challenge-ecw.eu.
• 5.2. Multiple scoreboards are available regarding your category.

 6. Flags

• 6.1. Each challenge will have a unique flag with the format ECW{FLAG} that must be submitted to the competition platform to receive points.
• 6.2. Participants should not share or disclose challenge flags to other participants before the end of the CTF.
• 6.3. Flag hoarding, meaning the act of solving multiple challenges and sending all the flags at the end of the CTF, is prohibited.

 7. Reporting Vulnerabilities

• 7.1. Participants who discover vulnerabilities in the competition platform or website should report them to the competition organizers immediately at contact@challenge-ecw.eu.

 8. Technical Requirements

• 8.1. Participants must have access to a stable internet connection and necessary tools to participate effectively.
• 8.2. Participants are advised to connect directly to the competition platform without using a proxy or VPN to ensure a smooth and trouble-free experience.

 9. Disqualification

• 9.1. The organizers reserve the right to disqualify any participant for violating the rules or engaging in unethical behavior.

10. Amendments

• 10.1. The competition organizers may amend the rules and regulations at any time. Participants will be notified of any changes through the website and the Discord server.

11. Privacy Policy

• 11.1. Information collection
• Personal information
• Username: Used for participant identification within the event platform
• Email Address: Used for account verification, communication and event updates
• Name: Used to validate the identify of participants in regard of email address and to acces to the final
• School: Used to select finalists
• Country: Used to validate countries allowed to participate
• IP Address: : Collected for platform security and monitoring unauthorized access
• Purpose of data collection
• Facilitate participant registration, communication, and event management
• Personalize the participant experience and provide relevant updates
• Select participants for the final
• Legal basis for processing
• Participant consent obtained during registration for the collection and processing of data
• 11.2. Data security and retention
• Data security measures
• Implementation of robust technical and organizational measures to safeguard data
• Protection against unauthorized access, loss, destruction, or alteration of personal data
• Data retention
• Personal data retained only until December 2024 for event-related purposes
• Secure deletion of data thereafter, unless required for legal obligations
• 11.3. Participant rights
• Rights under GDPR
• Right to access: Participants may request access to their personal data
• Right to rectification: Participants may request correction of inaccurate or incomplete data
• Right to erasure: Participants may request deletion of their personal data
• Right to restrict processing: Participants may request restriction of data processing
• Right to object: Participants may object to the processing of their personal data
• 11.4. Contact Information
• For inquiries regarding our Privacy Policy or to exercise your rights under GDPR, please contact us at contact@challenge-ecw.eu.
• 11.5. Changes to this privacy policy
• We may update this Privacy Policy from time to time. Any changes will be annonced in discord. We encourage you to review this Privacy Policy periodically for any updates.

12. Contact Information

• 12.1. For questions, concerns, or reporting issues, participants can contact the competition organizers on the Discord server or by mail at contact@challenge-ecw.eu.