Terms and Conditions

_This is an English translation provided for convenience. If there is any difference between this translation and the Spanish version, the Spanish version prevails._

1. Who we are and what these terms govern

1.1. These Terms and Conditions of Use (the "Terms") govern access to and use of the website school4lulz.online and all of its services (the "Platform" or "School 4 Lulz").

1.2. The Platform is operated by ASCENDEV S.A.S., identified with NIT (Colombian tax identification number) 902.063.194-2, with its address at Carrera 12 # 24-40, Apto 204, Torre 2B, Yumbo, Valle del Cauca, Colombia (hereinafter "we," "us" or the "Operator"). Contact email: soporte@school4lulz.online. Phone: +57 316 355 7856.

1.3. By checking the acceptance box during sign-up (with email or with Google), or by accepting a new version in the window that appears when you log in, you enter into an agreement with us on the terms of this document. If you do not agree, do not use the Platform.

1.4. These Terms are supplemented by the Personal Data Processing Policy, which explains what data about you we process and how to exercise your rights. Both documents are always available on the Platform.

2. What the Platform is

2.1. School 4 Lulz is a gamified web platform for learning cybersecurity, designed for complete beginners. The content is organized into paths (learning paths), modules and sections. Each section has a lesson and a quiz.

2.2. By completing quizzes you earn points, which determine your level, your achievements, your weekly streak and your position on the leaderboard (ranking).

2.3. Some lessons and the challenges include hands-on exercises: a simulated guided terminal within the Platform itself and a lab with real practice machines that we create just for you, with no open internet access and isolated from other users, which are destroyed when you finish and have a daily usage limit. Neither the guided terminal nor the lab connects to third-party systems.

2.4. The Platform's community meets on a Discord server, which is an external service. The Platform only links to it (see section 12).

2.5. The Platform is offered for educational purposes. It is not a professional security consulting, auditing or advisory service. When you complete a module or a path, we issue a Platform certificate (section 7.6), which attests to what you did here but is not a degree or a certification with official validity.

3. Requirements for using the Platform

3.1. Minimum age: 18. By signing up, you represent that you are of legal age and have the legal capacity to accept these Terms. We do not admit minors. If we detect or are informed that an account belongs to a minor, we will close it and delete its data in accordance with the Personal Data Processing Policy.

3.2. You must provide truthful information, especially your email address, which we use to verify your account and to communicate with you.

3.3. You may have only one personal account. Accounts are individual and non-transferable: you may not share, sell or assign them.

4. Your account

4.1. Sign-up. You can sign up with an email and password or with your Google account. If you use email, you must verify it through the link we send you. Until you verify it, you will be able to see the dashboard and the free lessons, but not complete quizzes or appear in the ranking.

4.2. Handle. The first time you log in, you choose a public username (handle). You may not use a handle that impersonates another person or organization, that is offensive or discriminatory, or that includes personal data of third parties. We may ask you to change it, or change it ourselves, if it breaks this rule.

4.3. Account security. You are responsible for keeping your password secret and for all activity that occurs in your account. If you suspect unauthorized access, write to us immediately at soporte@school4lulz.online. We apply security measures (see the Data Processing Policy), but no system is infallible.

4.4. Your account. In "Your account" you can change your handle (once every 30 days), your email (by confirming it from the new address) and your password, view and close your open sessions, download a copy of your data and delete your account. You can also request any of these things by writing to soporte@school4lulz.online; we will handle your request within the time frames set out in the Personal Data Processing Policy.

5. Acceptable and ethical use

This section is essential. The Platform teaches cybersecurity, which includes learning about offensive techniques (the ones attackers use) in order to learn how to defend against them. That is why we ask you for a clear commitment.

5.1. Exclusively educational purpose. All content, tools, commands and exercises are offered so that you can learn in simulated environments or on systems that you own or for which you have the express, prior and written authorization of their owner (ethical hacking).

5.2. Prohibition of unauthorized use. You agree not to use what you learn on the Platform to access, test, scan, intercept, alter, damage, block or extract information from computer systems, networks, devices, accounts or data of third parties without their authorization. In Colombia, Ley 1273 de 2009 (Colombian Law 1273 of 2009) defines as crimes, among others:

• abusive access to a computer system (art. 269A of the Código Penal, the Colombian Criminal Code);
• unlawful obstruction of systems or networks (art. 269B);
• interception of computer data (art. 269C);
• computer damage (art. 269D);
• use of malicious software (art. 269E);
• violation of personal data (art. 269F);
• spoofing of websites to capture personal data (art. 269G);
• theft by computer means and non-consensual transfer of assets (arts. 269I and 269J).

These acts may carry prison sentences and fines. The laws of other countries punish similar conduct (for example, in the United States, the *Computer Fraud and Abuse Act*): if you use the Platform from outside Colombia, you must also comply with the laws of your country.

5.3. Sole responsibility of the user. You are solely responsible for how you use the knowledge you acquire. The Operator is not responsible for any improper, illegal or unauthorized use that any person makes of what they learn, or for its consequences. If your conduct gives rise to third-party claims or penalties against the Operator, you must hold it harmless under the terms of section 11.

5.4. Respect for the Platform. You also may not:

• attack, scan, test for vulnerabilities in, or attempt to gain unauthorized access to the Platform itself, its infrastructure or the accounts of other users. If you find a vulnerability, report it in good faith to soporte@school4lulz.online without exploiting it, without accessing third-party data and without disclosing it publicly before we fix it;
• use the lab for anything other than practice (for example, mining cryptocurrency, attacking other machines or trying to break out of it or reach our infrastructure);
• use bots, scripts or automated tools to complete quizzes, extract content (scraping) or generate excessive traffic;
• circumvent access limits, Premium content locks or any technical protection measure;
• create multiple accounts, share answers or coordinate with other people to obtain points, first bloods or ranking positions (see section 7);
• impersonate another person, post content that is illegal, offensive, discriminatory or that infringes the rights of third parties, or use the Platform to harass other people;
• include your own or third parties' personal data in your written quiz answers or in your handle.

6. Content and intellectual property

6.1. Our content. The lessons, texts, quizzes, images, animations, videos, PDF cheat sheets, the design of the Platform, its code, the School 4 Lulz brand and its logos are protected by Ley 23 de 1982 (Colombian Law 23 of 1982) on copyright, Decisión Andina 351 de 1993 (Andean Community Decision 351 of 1993) and other applicable rules, and belong to the Operator or its licensors.

6.2. Personal use license. We grant you a limited, personal, non-exclusive, non-transferable and revocable license to access the content and use it only for your personal, non-commercial learning. You may download the materials that the Platform offers for download (for example, PDF cheat sheets) for your own study.

6.3. What you may not do. Except with our written authorization, you may not copy, reproduce, distribute, publish, sell, rent, transform or publicly communicate the content; nor may you upload it to other sites, use it to create your own courses or products, or use it to train artificial intelligence systems. Brief quotations with attribution of the source are permitted, to the extent the law allows.

6.4. Third-party content and links. Some lessons include links to external sites ("Further reading"). We do not control those sites and are not responsible for their content, availability or policies.

6.5. Accuracy of the content. We strive to keep the content correct and up to date, but cybersecurity changes quickly. The content may contain errors or omissions and is not a substitute for professional training or specialized advice. If you find an error, let us know.

6.6. Your suggestions. If you send us comments or suggestions about the Platform, we may use them to improve it without any obligation to compensate you.

6.7. Copyright complaints. If you believe that something published on the Platform infringes your copyright or that of someone you represent, write to us at soporte@school4lulz.online with: the protected work; where it is on the Platform (link); your contact details; a statement that you believe in good faith that the use is not authorized; and a statement that the information is accurate and that you are the rights holder or are authorized to act on their behalf. We will review it and, if appropriate, remove or disable it and inform you. Currently, users do not post content on the Platform; if in the future they are able to, we will close the account of anyone who repeatedly infringes copyright.

7. Points, levels, achievements, leaderboard and anti-cheating

7.1. What points are. Points, levels ("XP"), ranks, achievements, streaks, leagues, seasons, challenges, badges and first bloods are game elements to motivate learning. They have no monetary value, are not money or currency, cannot be redeemed, sold, transferred or claimed, and do not give rise to any right to a prize unless we expressly announce a contest with its own rules.

7.2. Calculation. Points are calculated on our servers according to the current rules published on the Platform. We may adjust those rules; changes apply to attempts started afterward and do not recalculate what has already been awarded.

7.3. Public visibility. Your handle, avatar, level and points (and the PRO badge if you have Premium) are shown to other users on the leaderboard and on your profile. Unverified, suspended or banned accounts do not appear in the ranking.

7.4. Anti-cheating system. To keep the ranking fair, we automatically analyze quiz activity for anomalous patterns, for example: multiple accounts from the same IP address, impossibly short response times, identical answers across accounts within a short time, or first bloods obtained immediately after a quiz is published. These detections generate alerts that are reviewed by a member of the team; no decisions about your account are made on a solely automated basis.

7.5. Measures. If the team concludes that there was cheating or abuse, it may, proportionately:

• reverse improperly obtained points (and reassign the first blood to whoever is entitled to it);
• hide you from the leaderboard;
• make manual adjustments to points, with a stated reason;
• revoke certificates obtained by cheating;
• suspend or close your account (section 8).

Every action the team takes on your account is recorded in an audit history. You will receive a notification on the Platform when your points are adjusted or a first blood is reassigned. If you believe a measure is unfair, write to us at soporte@school4lulz.online and we will review it.

7.6. Certificates. When you complete a module (all of its sections, including the final exam) or a path, we issue you a Platform certificate with a unique code, the name you choose for your certificates, what you completed and the date. Each certificate has a public verification page where anyone with the link or the code can check that it is authentic (see the Data Processing Policy). You can share and download it. If it was obtained by cheating or in breach of these Terms, we may revoke it, and its verification page will show it as revoked.

8. Suspension and closure of accounts

8.1. We may temporarily suspend your account (24 hours, 7 days or 30 days) or permanently close it (ban) if you breach these Terms, especially sections 5 and 7, or if required by law or by a competent authority.

8.2. While your account is suspended, you will not be able to log in and you will not appear in the ranking; when you try to log in, you will see the reason (if any) and the end date. If we state a reason, we will also send it to you by email. When the period ends, the account is reactivated automatically.

8.3. If the account is permanently closed, you will not be able to sign up again with the same email. To prevent this, we keep an encrypted fingerprint (hash) of that email, not the email in plain text.

8.4. In serious cases (for example, attacks against the Platform or use of the Platform to commit crimes), we may act immediately, without prior notice, and report the facts to the authorities.

8.5. You may stop using the Platform whenever you want and delete your account from "Your account" or request it by writing to soporte@school4lulz.online. Deletion is immediate and cannot be undone: you lose your progress, your points and your certificates.

9. Free plan and complimentary Premium

9.1. Currently, use of the Platform is free. We do not charge or process payments.

9.2. Some content is marked as Premium. At this time, Premium access is only granted manually, as a courtesy, at the Operator's discretion, for a set period of time (for example, 1, 3, 6 or 12 months). The courtesy is not a vested right, is not transferable and may be withdrawn. When it expires or is withdrawn, your account returns to the free plan without losing your progress, points, achievements or first bloods.

9.3. If in the future we offer paid plans, we will publish the purchase conditions (prices, payment methods, renewal, right of withdrawal and other consumer rights under Ley 1480 de 2011 (Colombian Law 1480 of 2011)) and we will ask you to accept the updated version of these Terms before you purchase.

10. Service availability

10.1. We make reasonable efforts to keep the Platform available and working properly, but we do not guarantee that it will work without interruptions or errors. We may carry out maintenance (while it lasts, you will see a notice instead of the Platform), and update, modify, add or remove features or content.

10.2. If we decide to permanently shut down the Platform, we will give at least 30 days' notice by email and within the Platform, except in cases of force majeure.

11. Limitation of liability and indemnification

11.1. The Platform and its content are offered for educational purposes. To the maximum extent permitted by Colombian law, and without prejudice to the rights granted to you by the Estatuto del Consumidor (Consumer Protection Statute, Ley 1480 de 2011), the Operator will not be liable for:

• the use you make of the knowledge, tools or techniques you learn, or for any damage that such use causes to you or to third parties (section 5);
• the decisions you make based on the content, which does not constitute professional advice;
• interruptions, failures or data loss caused by force majeure, acts of God, acts of third parties (including cyberattacks despite the reasonable measures taken) or failures of external services (internet providers, Discord, Google, etc.);
• the content, availability or practices of linked third-party sites or services;
• the loss of points, positions or achievements resulting from the application of anti-cheating measures or rule adjustments.

11.2. Nothing in these Terms excludes or limits the Operator's liability for willful misconduct or gross negligence, or the obligations that the law imposes on it on a mandatory basis.

11.3. Indemnification. You agree to hold the Operator harmless from any claims, penalties, damages and reasonable expenses (including attorneys' fees) arising from your breach of these Terms or of the law, in particular from the unauthorized use of what you have learned.

12. Discord and other third-party services

12.1. The community and live classes take place on Discord, a third-party service (Discord Inc.). The Platform only provides links: we do not share your data with Discord or link your account. Your use of Discord is governed by its own terms and privacy policy.

12.2. Even so, we expect you to follow the same rules of ethical use and respect set out in section 5 within the community. We may apply the measures in section 8 if conduct in the community affects the Platform or other users.

12.3. If you log in with Google, Google's terms also apply. We only receive the data described in the Personal Data Processing Policy.

13. Personal data

We process your personal data in accordance with Ley 1581 de 2012 (Colombian Law 1581 of 2012), Decreto 1377 de 2013 (Decree 1377 of 2013, compiled in Decreto 1074 de 2015, Decree 1074 of 2015) and our Personal Data Processing Policy, which forms part of these Terms. There you will find what data we collect, for what purposes, with which providers, how long we keep it and how to exercise your rights to access, update, correct and delete your data. If you live outside Colombia, its section 17 explains what applies in your case.

14. Electronic acceptance and evidence

14.1. In accordance with Ley 527 de 1999 (Colombian Law 527 of 1999), your acceptance of these Terms by means of a click (checkbox or button) is a data message with full validity and evidentiary force.

14.2. As proof of your acceptance we keep: the date and time (UTC), the IP address, the browser and device (user-agent), the exact version of the accepted document, a digital fingerprint (SHA-256 hash) of its text that makes it possible to prove exactly which text you accepted, and the acceptance method (sign-up with email, sign-up with Google or later acceptance of a new version). You can ask us for a copy of this evidence and of the text you accepted at soporte@school4lulz.online.

15. Changes to these Terms

15.1. We may modify these Terms to reflect changes in the Platform, in the law or in our practices. Each version has a number and an effective date.

15.2. When we make a material change, we will ask you to accept the new version the next time you log in to the Platform, in a pop-up window, and we may also notify you by email. We will show you a summary of the changes.

15.3. If you do not accept the new version, you will not be able to continue using the Platform, but you may request the deletion of your account or exercise your rights over your data by writing to soporte@school4lulz.online. The changes do not affect what you have already done under the previous version.

16. Governing law and dispute resolution

16.1. These Terms are governed by the laws of the Republic of Colombia.

16.2. Before taking any action, we invite you to write to us at soporte@school4lulz.online to seek a direct solution. We will respond within a maximum of 15 business days.

16.3. If we do not reach an agreement, the dispute will be resolved before the competent courts of the Republic of Colombia. This does not limit your right to go to the Superintendencia de Industria y Comercio (SIC, Colombia's consumer protection and data protection authority), in its capacity as the authority for consumer protection and personal data protection, or to use any other mechanisms the law grants you.

16.4. If any clause of these Terms is declared invalid, the remaining clauses will remain in force.

16.5. If you use the Platform from another country, nothing in the foregoing takes away the rights that the law of your country grants you as a consumer and that cannot be waived.

17. Contact

• Operator: ASCENDEV S.A.S. · NIT 902.063.194-2
• Address: Carrera 12 # 24-40, Apto 204, Torre 2B, Yumbo, Valle del Cauca, Colombia
• Email: soporte@school4lulz.online
• Phone: +57 316 355 7856
• Website: school4lulz.online