Privacy Policy

When you create an account we collect your username, email address, and password (hashed — never stored in plain text). As you use the Platform we record activity such as challenges solved, courses completed, XP earned, and login timestamps. We do not collect payment information — CyberAcad is free.

We use your information to: (a) operate and improve the Platform; (b) display your profile, rank, and achievements; (c) send transactional emails such as account verification; (d) enforce our Terms of Service; (e) generate anonymized aggregate statistics about platform usage.

We use three strictly necessary cookies: a session cookie to keep you logged in (set by our authentication system), a terminal authorization cookie to authorize WebSocket connections to your terminal instance, and a sidebar state cookie to remember your UI preference. None of these are used for tracking or advertising. No third-party cookies are set.

We do not sell, rent, or share your personal data with third parties for commercial purposes. Your username, rank, and activity (challenges solved, XP, certificates) are visible to other users on the Platform as part of the community leaderboard and profile features. We may disclose data if required by law.

Terminal (SSH) environments are ephemeral compute instances. We do not monitor the content of your terminal sessions beyond what is necessary to enforce our Terms of Service. Do not store sensitive personal data inside terminal instances — they may be reset or deleted at any time.

Your account data is retained for as long as your account exists. If you delete your account, your personal information is removed within 30 days. Anonymized activity data (e.g., aggregate challenge solve counts) may be retained indefinitely for platform improvement.

You have the right to access, correct, or delete your personal data. You can update your profile information from your account settings. To request full account deletion or a data export, contact us at [email protected]. We will respond within 30 days.

We take reasonable technical measures to protect your data, including encrypted connections (HTTPS), hashed passwords, and access controls on our infrastructure. No system is completely secure — use a strong, unique password and enable any available account protections.

CyberAcad is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, contact us and we will delete the account promptly.

We may update this Privacy Policy from time to time. We will notify users of material changes by posting a notice on the Platform. Your continued use of CyberAcad after changes take effect constitutes acceptance of the updated policy.