Terms of service

LevelSage is a cybersecurity-skills learning platform operated by the LevelSage team at levelsage.com. References to "we", "us", and "our" mean the operators of the platform. References to "you" mean the human using an account.

You must be old enough to consent to a service contract where you live (at least 13 globally; at least 16 in the EEA). You are responsible for the security of your credentials, including any MFA factor you enrol; do not share them. We reserve the right to suspend an account that we have a reasonable basis to believe has been compromised, and to notify the registered email when we do.

LevelSage ships practice labs and a credential Trial. You may attempt the challenges we provide, against the targets we provide, using your own account. You may not:

• attack any infrastructure outside the lab and Trial environments we provision for you (the boundary is the per-attempt endpoint; everything else is out of scope);
• attempt to exfiltrate other learners' data, methodology write-ups, or in-flight credentials, including by abusing public verification tokens or attempting to enumerate them;
• share, sell, or publish flag values, Trial methodology answers, or other content that lets a future attempt pass without doing the work (this is the one thing that breaks the credential's meaning for everyone else);
• automate sign-ups, sign-ins, or attempts in a way that circumvents the per-account attempt-budget or the per-attempt time box;
• use LevelSage to commit, attempt, or assist any unlawful act.

If you find a real security issue in LevelSage itself (not the practice content), report it to the address in Contact below — we will not pursue good-faith security research that respects the boundary above.

A passing Trial attempt produces a Credential record describing what was demonstrated, when, and the per-attempt variant id. The Credential carries a public verification token, surfaced at /verify/<token> so an employer or peer can audit the claim without an account. The methodology write-up that earned the Credential is never made public — it stays private to your account.

Credentials are issued as a "verified practical performance" for the cybersecurity track. They are not a regulated qualification, an academic accreditation, or a warranty of professional competence in any specific job. We may revoke a Credential if we have a reasonable basis to believe the underlying attempt was not the credential-holder's own work; a revoked token resolves cleanly as not-found.

LevelSage's content (the lessons, lab definitions, Trial variants, code, illustrations, and brand) belongs to us. You may use it for your own learning while you have an account; you may not republish or resell it. Anything you create on the platform — your profile, your methodology write-ups, your attempt history — belongs to you; you grant us the rights we need to operate the platform on your behalf (host it, render it back to you, surface the limited public Credential fields described in our privacy policy).

LevelSage is offered on a best-effort basis. We aim for high uptime, but we do not promise an uninterrupted service. We may take the platform down for maintenance, mitigate abuse by rate-limiting, or change features over time. Material changes that affect what you have already earned (Credentials in particular) will be communicated in-app or to your registered email.

You can close your account at any time by contacting us at the address below; we will delete your profile, your activity rows, and your authentication record within 30 days of confirming the request, as described in the privacy policy. We may suspend or close an account that materially breaches the acceptable-use terms above. Where we close an account for breach, your previously issued Credentials may be revoked.

LevelSage is provided "as is". To the maximum extent permitted by applicable law, we disclaim warranties not expressly made in these terms (including merchantability, fitness for a particular purpose, and non-infringement). Our aggregate liability to you for any claim arising out of or related to your use of LevelSage is limited to the amount you paid us for the service in the twelve months before the claim arose, or, if you paid us nothing, to a hundred euro.

Nothing in these terms limits or excludes any liability that cannot be limited or excluded by applicable law — most notably, statutory consumer rights you may have under the law of your country of residence.

If we change these terms, we post the change here and update the effective date at the top of the page. Material changes are also surfaced inside the app the next time you sign in. Continued use of the platform after a change means you accept the new terms; if you don't accept them, close your account before continuing.

Questions about these terms, account issues, or notices of any kind go to [email protected]. We aim to respond within five business days.