Privacy Policy

Last updated: 11/07/2026

Overview

Cyber Detectives is an educational cybersecurity platform. This policy explains what personal data we collect, why we collect it, and the choices you have. We are committed to protecting your privacy and processing data lawfully under the EU General Data Protection Regulation (GDPR).

This platform was developed as part of a master's thesis project at the University of Luxembourg. The data controller for this platform is Kejsi Bushi, University of Luxembourg, kejsi-bushi@hotmail.com.

What Data We Collect

When you create an account and use the platform, we may process:

  • Account details you provide: username, email address, and password (stored securely, never in plain text).
  • Gameplay data: cases you play, answers you submit, scores, and completion history.
  • Session and security data needed to keep you logged in and protect your account.

We do not sell your data or share it with advertisers. To operate the platform, we use trusted service providers who process data on our behalf:

  • Microsoft Azure — hosts the platform and processes requests.
  • Neon — provides the database where your account and gameplay data are stored.

Our in-game AI features operate on game content only and do not receive your personal data.

Cookies

Cookies are small text files stored on your device. We use them to keep the platform secure and working. We only set non-essential cookies with your consent, which you give through the cookie banner shown on your first visit.

Cookie Purpose Type
.AspNetCore.Identity.Application Keeps you logged in to your account. Essential
.AspNetCore.Antiforgery Protects forms against cross-site request forgery attacks. Essential
.AspNetCore.Session Maintains your session state while you use the platform. Essential
.AspNetCore.Consent Remembers your cookie choice so we don't ask again. Essential

Essential cookies are required for the platform to function and do not need consent. At present, we do not use analytics or advertising cookies. If we add analytics in the future, it will only run after you accept it through the cookie banner, and this policy will be updated to list it.

You can change or withdraw your cookie choice at any time using the Cookie Settings link in the footer.

Your Rights

Under the GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Delete your account and personal data (available from your profile settings).
  • Withdraw consent for non-essential cookies at any time.
  • Lodge a complaint with Luxembourg's data protection authority, the CNPD.

To exercise any of these rights, contact us at cyberdetectiveskb@gmail.com.

Data Security & Retention

We take reasonable technical measures to protect your data, including encrypted password storage and secure connections. We keep your data only as long as your account is active. When you delete your account, your personal data is removed.