1. Data we collect
- Account data: email, username, name (optional), password (hashed only), avatar and bio (optional).
- Activity data: course progress, exam results, challenge solves, points and badges.
- Security data: session IP/device and (short-lived) verification codes, used for protection and audit logging.
- Payment data: processed by our payment provider (Stripe); we never store card numbers on our servers.
2. How we use data
- Operating your account and authentication (including OTP codes and two-factor authentication).
- Showing progress, points, and leaderboards (username only - never your email).
- Essential emails: verification codes, security alerts (such as new-device sign-ins), payment receipts.
- Improving the platform via aggregate, de-identified statistics.
3. What we never do
- We never sell your data or share it with advertisers.
- Your public profile never exposes your email, purchases, or private progress.
- Two-factor secrets are stored encrypted only.
4. Storage & protection
Data is stored on Cloudflare infrastructure (D1 databases, R2 storage) with encryption in transit and access controls. Passwords are hashed with modern algorithms, 2FA secrets are encrypted at rest, and backups are encrypted before leaving the database.
5. Retention
We keep account data while your account is active. On deletion, personal data is hidden and sign-in is blocked, while legally required records (payments, invoices, issued certificates) are retained for the period the law requires.
6. Your rights
- Access and export your data via support@cyberiq.club.
- Correct your data in Settings.
- Delete your account in Settings (subject to the legal retention above).
- Control your public profile's privacy in Settings.
7. Cookies
We use the minimum cookies needed for sessions and preferences. See the Cookie Policy.
8. Contact
For any privacy request or question: privacy@cyberiq.club.