Cookie Policy
Last Updated: October 2026 · Version 2.0
This Cookie Policy explains what ByteBreach Security Academy stores on your device when you visit bytebreach.in or use the ByteBreach Android application, why each item exists, and how to control it. It is written to be read rather than to be skimmed: if you are looking for one specific thing, the short version is in section 3.
1. What Are Cookies?
Cookies and local browser storage (such as HTML5 LocalStorage) are small data files placed on your device when you visit websites. They are widely used to maintain security, enable interactive web features, preserve authenticated sessions, and measure platform effectiveness. A cookie can be a small file sent with every request to a site, or it can be an entry in the browser’s local storage that the site’s own JavaScript reads later. Both behave the same way from a privacy point of view, so this policy covers them together.
2. Categories of Cookies We Use
A. Strictly Necessary & Authentication Cookies
These tokens are essential for core platform operation. We use Firebase Authentication persistence and encrypted session tokens to keep your operative profile securely signed in, preserve your room deployment progress, and prevent cross-site request forgery (CSRF). Without them you cannot sign in, your progress would not be saved, and parts of the platform would not function. They cannot be switched off, and they do not build a profile of your browsing habits.
B. Advertising, Google AdSense & Google AdMob
ByteBreach partners with Google AdSense (on web) and Google AdMob (on mobile applications) to serve advertisements that support free cybersecurity training. Google and its certified partners use cookies (such as DoubleClick cookies) and mobile device advertising identifiers to serve relevant ads based on prior browsing activity. Within the Android application we use the Google Mobile Ads SDK, which may access the device advertising identifier; the web AdSense tag is removed inside the app so that only one advertising system is active at a time.
These technologies help display relevant educational tools, prevent fraud, and limit the frequency of displayed advertisements. Because the site is free to use, this is the mechanism that funds the curriculum, the lab environment, and the platform upkeep. You can decline personalised advertising using the links in section 3, and the banner that appears on your first visit records your choice locally in your browser so that we do not ask again on every page load.
C. Functional & Preferences Cookies
These cookies remember choices you make (such as UI preferences, audio cues, or dismissed banners) to deliver a consistent, personalized experience. The cookie consent record itself is stored locally under a key such as bytebreach_cookie_consent so that the site knows you have already made a decision.
D. Analytics & Measurement Cookies
We use privacy-conscious, aggregate analytics to understand which pages are useful and where the platform is difficult to use. This is used to prioritise work, not to build an advertising profile. Analytics data is aggregated and reported at a segment level; we do not use it to identify individual visitors.
3. How to Manage and Opt Out of Cookies
You have full control over your cookie preferences:
- Google Personalized Ads Opt-Out: Visit Google Ads Settings to customize your Google ad experience or opt out of interest-based ads. Publishers using AdSense can also be excluded directly from Google Adsense settings.
- Industry Opt-Out Platforms: Opt out of third-party behavioral advertising at aboutads.info/choices or Your Online Choices (EU).
- Android Device Controls: In the Android application, advertising identifiers and ad personalisation can be reset or limited from your device settings, and Google Play services can clear the associated advertising data.
- Browser Controls: Most web browsers allow you to reject all cookies, block third-party cookies, or clear existing cookies through their settings. Note that disabling strictly necessary cookies will prevent you from staying signed in.
4. Consent and How We Record It
Where a visitor arrives from a region that requires prior consent for advertising cookies, the site presents a consent banner before personalised advertising is served. Accepting or dismissing the banner stores your choice locally so that you are not asked on every page. Dismissing the banner does not stop the site working: the strictly necessary cookies keep functioning, and you can still read every guide, run every lab, and use every tool.
We do not use consent-management behaviour that makes the accept button deliberately hard to find, and we do not condition the core learning experience on accepting advertising. If you later change your mind, clearing your browser storage for bytebreach.in and reloading the site will bring the banner back.
5. Third-Party Content and External Links
Some pages link to or embed content hosted elsewhere, for example vendor documentation, standards publications, and community channels. Those providers set their own cookies and follow their own privacy policies, which we do not control. We choose external references deliberately and prefer official primary sources, but the moment you follow a link, the privacy practices of the destination site apply rather than ours.
6. Additional Privacy Disclosures
For a comprehensive review of our data protection practices, please read our full Privacy Policy or contact us at ikkaghostt@gmail.com. Our Terms and Conditions describe how advertising is used on the platform, and our Editorial Policy confirms that advertising has no influence on the material we publish. If you have a question that none of those pages answers, use the contact form and we will answer it.
