Effective 8 Oct 2026
Privacy policy
BB Arena has no accounts or advertising, and our visitor statistics don't use cookies or identify you. This page explains the little personal information we do handle, mostly when you email us, and what your rights are.
In short
- Browsing the site: we count visits with Cloudflare Web Analytics, which doesn't use cookies and only gives us totals, such as page views and countries. Cloudflare also processes basic technical data to deliver the site and keep it secure.
- Emailing us: we use what you send to reply and to arrange any evaluation, and keep it no longer than we need to.
- API keys and access details for evaluations are kept confidential, used only to run the evaluation, and deleted when it's done.
- We never sell personal information or add you to mailing lists.
Who we are
BB Arena is run by Marius du Preez, trading as MDP SEC, in Australia ("we", "us"). We're responsible for the personal information described here. Contact us at [email protected].
Browsing the site
The site is a set of static pages. There are no accounts, sign-up forms or advertising, and we don't set cookies ourselves. Fonts and images are served from this site, not from third parties.
The site is delivered by Cloudflare. Like any web host, Cloudflare processes technical information needed to deliver pages and protect the site from attacks and abuse, such as your IP address, browser type and the pages requested. As part of that protection, Cloudflare may set a small, strictly necessary security cookie (for example __cf_bm); it isn't used for tracking or advertising.
Visitor statistics
To see how the site is used, we use Cloudflare Web Analytics. When a page loads, a small Cloudflare script records the page you viewed, the site that linked you here, your browser, operating system and device type, your country, and how quickly the page loaded. It doesn't use cookies or store anything on your device, and it doesn't follow you across other websites.
We only see the totals, such as page views, top pages, referring sites, countries and loading speed. We can't see or identify individual visitors, and we don't combine these statistics with anything else.
When you email us
Our email is provided by Google Workspace. When you contact us, we receive your name, email address and whatever you include in your message, along with details such as your organisation. We use this to reply, to discuss and run evaluations or sponsored runs, and to keep a record of the conversation.
Evaluation requests and API access
If you ask us to evaluate a model, you may send API keys, endpoints or other access details. We treat these as confidential: they're stored securely, accessible only to us, used only to run your evaluation, never shared, and deleted when the evaluation is finished. We recommend issuing a dedicated key that you can revoke afterwards.
Published results describe AI models, not people. They contain benchmark figures only and no personal information.
Why we use your information
- Replying to you and running evaluations: to take steps you've asked for, or our legitimate interest in running the benchmark.
- Keeping the site secure: our legitimate interest in protecting the site and its visitors.
- Visitor statistics: our legitimate interest in understanding how the site is used and keeping it fast.
- Financial records for sponsored runs: to meet our legal obligations, such as tax record-keeping.
How long we keep it
- Emails and evaluation correspondence: for as long as we need them for the conversation, then up to two years as a record.
- API keys and access details: deleted as soon as the evaluation is finished.
- Invoices and payment records for sponsored runs: as long as Australian tax law requires, usually five years.
- Cloudflare's technical data and visitor statistics: kept by Cloudflare under its own policy.
Sharing and international transfers
We don't sell or rent personal information, and we only share it with the providers that run our services (Cloudflare for the website and visitor statistics, and Google for email) or where the law requires it. These providers process data in several countries, including the United States, and use recognised safeguards such as standard contractual clauses for international transfers.
Your rights
Depending on where you live, you can ask us for a copy of the personal information we hold about you, ask us to correct or delete it, object to or restrict how we use it, or ask for it in a portable format. Email [email protected] and we'll respond within a month.
If you're unhappy with how we've handled your information, please tell us first. You can also complain to the Office of the Australian Information Commissioner, or to the data protection authority where you live (in the UK, the ICO).
Security
We protect the information we hold with access controls and encrypted connections, and we keep as little as possible. No system is perfectly secure, but we'll tell you promptly if a problem affects your information.
Children
BB Arena is for professionals and isn't aimed at children. We don't knowingly collect information from anyone under 16.
Other websites
We link to other sites, such as MDP SEC's site and bug-bounty platforms. Their own privacy policies apply when you visit them.
Changes to this policy
If we change how we handle personal information, we'll update this page and the effective date at the top.