CybLight Website Privacy Policy

1. Who we are

CybLight is the author's personal non-commercial project dedicated to electronics, programming, games, and web technologies. It includes the cyblight.org website, login.cyblight.org sign-in service, api.cyblight.org API, and the official Android mobile app.

2. Scope of this policy

This Policy describes what data may be processed when using the Site and related CybLight services. Most cyblight.org pages are available without registration. Profile, friends, and messaging features require an account on login.cyblight.org or in the mobile app.

3. Data when visiting the site

When you open cyblight.org pages without signing in, the following technical data may be processed automatically:

• IP address and approximate location (country) — via Cloudflare infrastructure;
• browser and device information (the User-Agent);
• page URL and referral source ( Referer);
• date and time of the request;
• browser language and time zone.

The Site may request an aggregated online user count from api.cyblight.org and check whether you are signed in (via session cookies) to show "Sign in" or "Profile". YouTube channel counters use a statistics proxy; video playback loads YouTube in youtube-nocookie.com mode.

This data is needed to run the Site, provide basic statistics, and prevent abuse.

4. CybLight account

If you register or sign in via login.cyblight.org, personal data is processed to operate your account. This may include:

• username, email address, and password hash (passwords are not stored in plain text);
• profile data: name, avatar, bio, and other fields you provide;
• privacy settings for individual profile fields;
• friends list, online status, private messages, and drafts;
• security data: active sessions, devices, 2FA, passkeys, sign-in history;
• IP address, browser, and technical information on sign-in and important account actions.

Session cookies and related browser mechanisms keep you signed in. They may be shared between cyblight.org and login.cyblight.org so the Site knows you are authenticated. Sign-in may use Cloudflare Turnstile to block automated abuse.

Account data is stored on the project's server infrastructure (including via Cloudflare). It is not used for ad targeting and is not sold to third parties.

5. Android mobile app

The official CybLight Android app uses the same account as login.cyblight.org. The app may:

• store session data and UI settings locally on your device;
• call api.cyblight.org for sign-in, profile, friends, messages, and security;
• check for updates (including via GitHub Releases);
• send technical request metadata similar to a browser when using the API.

APK files are distributed via cyblight.org and GitHub. You install the APK voluntarily; Android permissions are requested only as needed for app features (network, notifications, etc.).

6. Easter eggs and hidden elements

The Site may include game elements ("easter eggs"), such as hidden buttons or animated objects on special pages.

When such an easter egg triggers, an event is sent to the server for technical purposes, then a notification to my Telegram bot.

The following is recorded:

• IP address and country (via Cloudflare);
• page where the easter egg triggered;
• browser and device info (User-Agent);
• date, time, and timezone from browser settings;
• event type (e.g. egg_click or theme_flux).

This data is used only to see how many people found an easter egg, which countries visitors come from, and how often a game mechanic triggers. Data is not used for marketing and is not shared with third parties except the technical services listed below.

7. "Report a problem" form

The Site has a "Report a problem" feedback form. When you submit it, the following is sent to api.cyblight.org:

• selected category and message text;
• email address — only if you provide it voluntarily;
• URL of the page from which the report was sent;
• User-Agent, browser type, operating system, and submission time.

This information is used only to investigate issues and improve the project. Do not include unnecessary personal data in your message unless needed to describe the problem.

8. Cookies and local storage

The Site may use localStorage, cookies, and other browser mechanisms to store local settings, for example:

• selected light or dark theme;
• selected interface language (cyblight-lang);
• a flag that an easter egg was already found so it is not shown again;
• local high scores in on-site games;
• session cookies for CybLight account sign-in.

Most of this data stays in your browser only. Session cookies are sent to the server on requests to api.cyblight.org and related domains to keep you signed in.

9. Third-party services

The following services may be used to run the Site, accounts, and minimal technical statistics:

• Cloudflare — CDN, attack protection, DNS, and hosting for part of the infrastructure. May process IP addresses, country, and other request metadata.
• Cloudflare Turnstile — bot protection on sign-in at login.cyblight.org.
• Telegram — used to send easter-egg notifications to my personal Telegram account.
• YouTube / Google — embedded video previews and players; channel statistics are proxied via the CybLight backend.
• GitHub — source code and Android app releases; GitHub processes requests when downloading APKs or checking updates under its own policies.
• Web of Trust (MyWOT) — site trust badge widget on the home page (when enabled).
• MyNickname — external certificate widget in the Site footer.
• Embedded widgets and CDNs (e.g. jsDelivr for technology icons) may collect data under their own policies.

By using the Site and related services, you also accept these services' data processing terms.

10. How long data is stored

Technical request logs, easter-egg notifications, and problem reports may be kept for a limited time needed for statistics, security, and project improvements.

Account data is kept while the account is active. You may request account deletion via the Contacts page or security tools in your profile, if available.

Unverified registrations without a confirmed email may be automatically deleted after a limited period of inactivity.

11. Your choices and rights

You can:

• use the Site without registering or creating an account;
• do not interact with easter eggs and hidden elements;
• clear cookies and localStorage in your browser settings;
• disable JavaScript — some Site features will stop working;
• request information about processed data or deletion via Contacts.

If you believe data is collected incorrectly or have a privacy question, contact me via the "Contacts" on the Site.

12. Policy changes

I may update this Privacy Policy from time to time. The current version is always available at the "Privacy Policy" link in the Site footer. The last update date is shown at the top of the document.