~/legal

Privacy Policy

How CyberA4U collects, uses, and protects account, phone, profile, learning, and payment data.

Last updated 17 September 2026

Who we are

CyberA4U (“we”, “us”) operates cybera4u.com. This policy explains what personal data we collect, why we use it, and the choices you have. For questions or deletion requests: [email protected].

Account and profile data

When you register we collect your name, email address, username, password hash (we never store the raw password), and phone number in E.164 format with the associated country. Google sign-in provides the email and name Google shares with us; you then set a username, password, and phone to finish the account. Optional profile fields include bio, country, location, timezone, website, GitHub, LinkedIn, and photos you upload.

Phone numbers

Phone is required at signup so we can uniquely identify the account and assist you in support. Administrators can view and edit the number. Other members see it only if you enable “Show phone on public profile.” The default is hidden. You may change or clear the number later from your profile (clearing may be limited if the field is required for new registrations). We do not send marketing SMS. We do not sell phone numbers.

Learning and arena activity

We store course enrollments and progress, quiz attempts, certificates, challenge submissions and solves, points, levels, hints unlocked, and related arena statistics so we can show your dashboard, leaderboards (where you opt to appear), and instructors’ class views.

Social graph and messages

Follows, blocks, and reports are stored to run the community. Direct messages use client-side encryption; we store ciphertext, conversation membership, and delivery metadata. We cannot read message bodies in normal operation. Reports you file, and content you publish on public profiles or writeups, are visible as you configure.

Payments

Checkout is handled by our payment provider. We do not store full card numbers. We keep order records, invoice references, payment status, and voucher issuance so we can fulfil purchases and handle refunds.

Technical data, cookies, and sessions

We keep server logs (IP address, user agent, timestamps) for security, abuse prevention, and debugging, typically for a short operational window. Authentication uses a session cookie (and a CSRF-friendly token) to keep you signed in. We do not use advertising pixels or sell data to ad networks. Preference cookies may remember UI state.

How we use data

To create and secure your account, deliver courses and the arena, show public profiles according to your visibility settings, process payments, prevent fraud and cheating against the platform, send transactional mail you request (password reset, order confirmation), and comply with law. We do not sell personal data.

Sharing

We share data with processors who host the Service (cloud, database, email, payments, video) under contract. Arena challenges may run on an engine we operate; identity is synced so your scoreboard name matches the platform. We disclose information if required by law or to protect the Service and its users from serious harm.

Retention and deletion

You can delete your account from settings or by emailing [email protected]. We remove or anonymise personal profile data that is no longer needed. We may retain invoices, security logs, and records of abuse for legal, accounting, or safety reasons. Backups expire on a rolling schedule.

Your choices

You can edit profile fields, hide your phone, limit who can message you, set profile visibility (public, followers, private), and disable discoverability in people search. You can enable two-factor authentication. You may request a copy of the personal data we hold, or correction, by contacting support.

International processing

We may process data in the regions where our hosting and support operate. By using the Service you understand that your information may be transferred to those locations with appropriate safeguards.

Children

The Service is not directed at children under 16 (or a higher age required in your country). We do not knowingly collect data from them. Contact us if you believe we have, and we will delete it.

Changes

We may update this policy. The “Last updated” date below will change. Material updates will be posted on this page. Last updated 17 September 2026.