Privacy Policy

Last updated: June 2026. CyberSchool Security Academy ("we", "us") is committed to protecting your privacy. This policy explains what we collect and how we use it.

1. Information We Collect

• Account data — name, email, and password (stored hashed) when you register.
• Usage data — course progress, lab activity, CTF submissions, and credits earned.
• Technical data — IP address, browser type, and session logs for security.

2. How We Use It

• To operate the platform, track your learning, and issue certificates.
• To secure accounts (JWT authentication, optional 2FA) and prevent abuse.
• To improve our courses and labs.

3. Data Storage & Security

All authentication and application data is stored in our own PostgreSQL database. Passwords are bcrypt-hashed; flags are stored as SHA-256 hashes, never in plaintext. We do not sell your personal data.

4. Cookies

We use a session token stored in your browser to keep you signed in. We do not use third-party advertising cookies.

5. Your Rights

You may request access to, correction of, or deletion of your personal data by contacting us at the email on our contact page.

6. Contact

Questions about this policy? Reach us via the Contact page.

← Back to home