ByteBreach Security Academy Official Logo
BYTEBREACH
Data protection & transparency

Privacy Policy

Last Updated: September 2026

1. Introduction

Welcome to ByteBreach Security Academy (“ByteBreach”, “we”, “our”, or “us”), accessible at https://www.bytebreach.in. We are committed to safeguarding your personal data, privacy rights, and operational integrity while you participate in our cyber defense curricula, CTF practice labs, and academy resources.

This Privacy Policy explains what information we collect, how we process and protect it, and your rights regarding your data, including specific disclosures regarding third-party vendors and advertising partners such as Google AdSense.

2. Information We Collect

  • Authentication & Profile Information: When you register or authenticate via Firebase Authentication (email/password or authorized OAuth providers), we securely store your email address, display name, operative handle, avatar initials, and authentication timestamps.
  • Learning Telemetry & CTF Progress: We record module completions, study room milestones, Daily Challenge submissions, CTF flag validation timestamps, streak counters, earned XP, and operative rank tier transitions to deliver gamified platform features.
  • Log & Diagnostic Telemetry: When you access our servers, technical telemetry such as IP address, browser type, device specifications, operating system, referring URLs, and error logs may be automatically recorded for defensive monitoring and denial-of-service mitigation.
  • Inquiry & Communications Data: When you transmit questions or support requests through our direct command uplink, we process your submitted name, email address, and message contents to respond to your inquiry.

3. Google AdSense, Google AdMob & Advertising Disclosures

To support free community access to our training tracks, cheat codes, and practice environments, ByteBreach displays third-party advertisements served by Google AdSense (on our website) and Google AdMob (within our mobile applications and progressive app containers):

  • Google AdSense (Web Browser Services): Third-party vendors, including Google, use cookies to serve ads based on a user’s prior visits to ByteBreach or other websites across the Internet. Google’s use of advertising cookies (such as the DoubleClick cookie) enables it and its partners to serve relevant ads to our web visitors.
  • Google AdMob (Mobile Application Services): For students accessing ByteBreach through our mobile application, installed PWA, or native wrappers, advertisements are powered by Google AdMob. AdMob may process non-sensitive device identifiers, such as the Google Advertising ID (GAID) or Identifier for Advertisers (IDFA), to serve contextual and interest-based mobile advertisements in accordance with Google Play Developer Program Policies.
  • Personalized Advertising Opt-Out: Web visitors may opt out of personalized advertising by visiting Google Ads Settings. Alternatively, you can opt out of a third-party vendor’s use of cookies for personalized advertising by visiting www.aboutads.info or the Network Advertising Initiative at optout.networkadvertising.org. Mobile app users can reset their advertising identifier or opt out of personalized ads directly within device settings (Android: Settings > Google > Ads > Reset advertising ID / Delete advertising ID; iOS: Settings > Privacy & Security > Tracking).

4. Cookies and Web Beacons

ByteBreach uses essential session tokens and persistent cookies to preserve your signed-in state, remember your theme and navigation preferences, and protect your account against cross-site forgery. Third-party advertisers on our site may also place and read cookies on your browser or use web beacons to collect information in the course of ads being served.

For detailed insights on managing, inspecting, and clearing cookies, please review our dedicated Cookie Policy.

5. How We Protect Your Data

We enforce strict security controls across all platform infrastructure:

  • Encrypted transport layer security (HTTPS / TLS 1.3) across all endpoints.
  • Encrypted-at-rest database persistence managed by Google Cloud & Firebase infrastructure.
  • Zero sale, rental, or trade of learner personal records or submitted credentials.
  • Strict principle of least privilege applied to internal administrative interfaces.

6. Your Rights (GDPR & CCPA / CPRA)

Depending on your jurisdiction, you possess the right to request access to the personal data we hold about you, request corrections to inaccurate records, request deletion of your account and learning telemetry, or object to specific processing activities.

To exercise any of these rights, contact our privacy officers directly at ikkaghostt@gmail.com.

7. Children’s Privacy (COPPA)

ByteBreach does not knowingly collect or solicit personal identifiable information from anyone under the age of 13. If we discover that personal data of a minor under 13 has been collected without verifiable parental consent, we will promptly delete that information from our servers.

8. Contact Us

If you have questions, feedback, or compliance inquiries regarding this Privacy Policy or our advertising practices, please reach out to:

ByteBreach Security Academy

Email: ikkaghostt@gmail.com

Domain: https://www.bytebreach.in

Contact Uplink: /contact