Privacy Policy
Last updated: June 2026
This Privacy Policy explains how CyberPrep ("we") collects, uses, and protects your personal data when you use our certification-preparation platform. We process data in accordance with the EU General Data Protection Regulation (GDPR).
1. Data Controller
CyberPrep is the data controller for the personal data described here. For any data-protection request, contact privacy@cyberprep.pro.
2. What We Collect
- Account data: your email address (used for passwordless sign-in).
- Study data: your answers, scores, streaks, domain progress and the certifications you study.
- Technical data: when you consent to analytics, aggregated and anonymized usage metrics (see Cookie Policy).
3. Legal Basis
- Contract: to provide the study platform you signed up for.
- Consent: for optional analytics, which load only after you accept (Art. 6(1)(a)).
- Legitimate interest: to keep the service secure and prevent abuse.
4. Where Your Data Lives
Authentication and study data are stored with Supabase (PostgreSQL) on infrastructure located in the EU (Ireland). The application is served via Vercel. When you consent to analytics, Vercel Analytics and Vercel Speed Insights process anonymized usage metrics.
5. Data Retention
We keep your account and study data for as long as your account is active. You can delete all study progress, or your entire account and data, at any time from Settings. Deletion is immediate and irreversible.
6. Your Rights
Under the GDPR you have the right to:
- Access — request a copy of your data (Settings → Export my data, Art. 20).
- Rectification — correct inaccurate data.
- Erasure — delete your account and data (Settings → Delete account, Art. 17).
- Object / restrict — withdraw analytics consent at any time by clearing cookies.
- Lodge a complaint with your local supervisory authority.
7. Contact
For any privacy request, email privacy@cyberprep.pro.