Terms of service

1. Parties and scope

These terms govern the use of the coaching application at https://coach.ratctf.com ("Coach", "the app") offered by The XSS Rat (Wesley Thijs) (KBO/BCE 0795300624), Joseph Smeetslaan 21, 3630 maasmechelen ("we"). They apply to students, prospective students and coaches who use the app. Belgian law applies; in case of dispute the courts of the judicial district where we are established have jurisdiction, without prejudice to the mandatory consumer-protection rules of your country of residence and your right to use the EU online dispute resolution platform or the Belgian Consumer Ombudsman Service (consumentenombudsdienst.be).

2. The service

Coach is the companion application to 1-on-1 security coaching bought from The XSS Rat (sessions, 1/4/12-week programmes). It is used to plan sessions, exchange materials and reports, keep notes and skill assessments, and issue certificates of completion. The coaching itself is governed by the offer you accepted when buying it (Podia / invoice), including its price, number of hours and cancellation terms; these terms only add the rules for the app.

3. Accounts

Coaches sign in with an approved Google Workspace account; students receive a username and password from their coach. Keep credentials confidential and tell us at once if you suspect misuse. We may suspend an account that is used abusively, for unauthorised access attempts, or in breach of these terms.

4. Acceptable use

Use the app only for your own coaching. Do not upload content that infringes third-party rights, contains malware, or includes personal data of third parties you are not entitled to share (for example, do not upload client data from a penetration test without authorisation). Security testing of the app itself is welcome under our responsible-disclosure policy: report findings to info@thexssrat.com; do not access other users' data.

5. Content and intellectual property

Course materials, lesson packages, templates and the Field Guide remain our intellectual property and are licensed to you for personal, non-transferable use during and after the coaching. Your own notes, reports and uploads remain yours; you grant us a licence to store and process them to deliver the coaching. Certificates of completion are issued at the coach's discretion when the objectives of a series are met; they confirm completion of a coaching programme and are not an accredited qualification.

6. Availability and changes

We aim for high availability but do not guarantee uninterrupted access; maintenance may cause short outages. We may add, change or remove features. We keep encrypted backups; you can export your materials at any time via your file.

7. Liability

Coaching is advice; results in bug-bounty programmes or penetration-testing careers depend on your own work and on third parties and are not guaranteed. To the extent permitted by Belgian law our liability is limited to the amount you paid for the coaching in the 12 months preceding the claim, except in case of fraud, intentional fault or bodily harm. Nothing in these terms limits the mandatory rights of consumers under Book VI of the Belgian Code of Economic Law.

8. Right of withdrawal

Consumers have a 14-day right of withdrawal on distance purchases of coaching. Once a session has taken place at your request within those 14 days, you owe the price of the sessions already delivered. Digital content made available immediately with your express consent is excluded from withdrawal, as provided in art. VI.53 of the Code of Economic Law.

9. Privacy

Personal data is handled as described in our privacy policy, which forms part of these terms.

10. Termination

You may stop using the app at any time and ask for deletion of your data. We may terminate access for breach of these terms after notice, or when the coaching relationship has ended and the retention period in the privacy policy has lapsed.

11. Changes to these terms

We may update these terms; the date at the top changes when we do. Continued use after a change means acceptance; if you do not agree, stop using the app and contact us.