Privacy Policy

Last updated · 22 April 2026

What we collect

The minimum needed to run an account-based game:

• Email address — for account verification, password reset, optional notifications.
• Username — public display name on the leaderboard.
• Game state — XP, missions completed, badges, age-group choice, hobby tag, difficulty level.
• Session timestamps — to compute "active streak" and prevent abuse.

What we do NOT collect

• No real name, address, phone number, payment information, ID documents.
• No advertising trackers, third-party analytics SDKs, or session-replay tools.
• No content from your missions beyond the answers you submit (which are stored as numerical scores, not transcripts).

How your data is used

Strictly to operate CyberGuard: render your dashboard, save your progress, render the leaderboard, send password-reset emails. We do not sell, rent, or share your data with advertisers, data brokers, or any third party for marketing.

Where it lives

Hosted on Supabase (data centre in Singapore) and served via Cloudflare Pages. Authentication is managed by Supabase Auth using email + password (or one-time passcode). All connections are HTTPS/TLS.

Cookies

We use only essential cookies required for the auth session and a small number of localStorage entries (theme preference, sound mute state). No tracking, no analytics cookies, no advertising cookies.

Your rights

• Access — see your own profile + game history any time from your Profile page.
• Delete — wipe your account and all associated data from the Profile page; deletion is irreversible and immediate.
• Export — request a JSON export of your data by emailing the contact below.
• Correct — change your username, avatar, age group, hobby, or difficulty any time.

Children

CyberGuard has a Kids skill track designed for ages 7-12, but the platform itself is not designed for children to register independently. Accounts created by users under 13 should be supervised by a parent or guardian who agrees to this policy on their behalf.

Changes

If we materially change how data is handled, the "Last updated" date above changes and we will surface a notice in the dashboard for at least 14 days. Continued use after a change indicates acceptance.

Contact

Questions, deletion requests, or data exports: cyberguard@ivanthan.uk