Privacy Policy

1. Introduction

Welcome to ByteBreach Security Academy (“ByteBreach”, “we”, “our”, or “us”), accessible at https://bytebreach.in. We are committed to safeguarding your personal data, privacy rights, and operational integrity while you participate in our cyber defense curricula, CTF practice labs, and academy resources.

This Privacy Policy explains what information we collect, how we process and protect it, and your rights regarding your data, including specific disclosures regarding third-party vendors and advertising partners such as Google AdSense.

2. Information We Collect

• Authentication & Profile Information: When you register or authenticate via Firebase Authentication (email/password or authorized OAuth providers), we securely store your email address, display name, operative handle, avatar initials, and authentication timestamps.
• Learning Telemetry & CTF Progress: We record module completions, study room milestones, Daily Challenge submissions, CTF flag validation timestamps, streak counters, earned XP, and operative rank tier transitions to deliver gamified platform features.
• Log & Diagnostic Telemetry: When you access our servers, technical telemetry such as IP address, browser type, device specifications, operating system, referring URLs, and error logs may be automatically recorded for defensive monitoring and denial-of-service mitigation.
• Inquiry & Communications Data: When you transmit questions or support requests through our direct command uplink, we process your submitted name, email address, and message contents to respond to your inquiry.

4. Cookies and Web Beacons

ByteBreach uses essential session tokens and persistent cookies to preserve your signed-in state, remember your theme and navigation preferences, and protect your account against cross-site forgery. Third-party advertisers on our site may also place and read cookies on your browser or use web beacons to collect information in the course of ads being served.

For detailed insights on managing, inspecting, and clearing cookies, please review our dedicated Cookie Policy.

5. How We Protect Your Data

We enforce strict security controls across all platform infrastructure:

• Encrypted transport layer security (HTTPS / TLS 1.3) across all endpoints.
• Encrypted-at-rest database persistence managed by Google Cloud & Firebase infrastructure.
• Zero sale, rental, or trade of learner personal records or submitted credentials.
• Strict principle of least privilege applied to internal administrative interfaces.

6. Your Rights (GDPR & CCPA / CPRA)

Depending on your jurisdiction, you possess the right to request access to the personal data we hold about you, request corrections to inaccurate records, request deletion of your account and learning telemetry, or object to specific processing activities.

To exercise any of these rights, contact our privacy officers directly at support@bytebreach.in.

7. Children’s Privacy (COPPA)

ByteBreach does not knowingly collect or solicit personal identifiable information from anyone under the age of 13. If we discover that personal data of a minor under 13 has been collected without verifiable parental consent, we will promptly delete that information from our servers.