Who is CyberQuest designed for?

CyberQuest is built for students aged 14 to 18 and their teachers, specifically for cybersecurity and cryptography education programmes. It works well for summer schools, bootcamps, and regular classroom use. It is also suited to anyone starting from the basics to build a foundation for more technical courses.

Do students need coding experience?

No. The platform starts with fundamentals and builds up gradually. The tutorial world gets students comfortable before moving on to more advanced topics.

How does the battle system work?

Students challenge each other to real-time battles in five modes: Binary Race, Packet Sniffer, Phishing Detective, Trivia Streak, and Password Cracker. Teachers can spectate and run tournament brackets.

What do teachers need to set up?

Create a game code. Students join with that code, and teachers get a real-time dashboard with progress tracking, analytics, polls, and classroom controls, all in the browser.

There is a free tier for individual learners, alongside paid monthly and lifetime options. Educational institutions should contact info@cyberquest.club for pricing and access details.

What devices are supported?

CyberQuest works in any modern browser on desktop, tablet, or mobile. Both the student and teacher interfaces are responsive, so students can learn on a phone while teachers manage from a desktop or tablet.

I am not a student or a teacher. Can I use CyberQuest?

Yes. CyberQuest is available to self-learners with one-time access or a monthly subscription. All content is designed for beginners with no prior experience. Contact info@cyberquest.club for individual access.

Privacy Policy

Last updated: 16 July 2026

This Privacy Policy explains how OC Solutions LTD (“we”, “us”, or “our”) collects, uses, and protects personal data when you use CyberQuest (“the Platform”) at cyberquest.club.

We are committed to protecting your privacy and handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

OC Solutions LTD is the data controller for personal data processed through CyberQuest.

For enquiries, contact us at info@cyberquest.club.

2. Data We Collect

Information you provide

Account data: Username, email address (for individual accounts), password (hashed, never stored in plain text), selected avatar
Game code: Used to join a specific class or institutional session
Payment data: When you purchase a subscription or lifetime access, payment is processed by Stripe. We receive your name, email, and a reference to your payment method. We never see or store your full card number. Stripe’s privacy policy applies to payment processing
User-generated content: Flashcards, notes, whiteboard drawings, chat messages, and code submissions
Mission portfolio content: Reflections, next steps, an optional short code excerpt, whether an entry is private or visible to the current class teacher, and which entries you select for a print showcase

Information collected automatically

Activity data: Progress through activities, XP earned, achievements unlocked, battle results, quiz answers, and completion times
Mission portfolio evidence: Activity and module identifiers, skill tags, practical type, completion outcome, attempt count, and a compact activity-specific summary generated from supported practical work
Session data: Online/offline status, session duration, device type
Technical data: Browser type, screen resolution, IP address (for security purposes only)

Information we do not collect

Real names (unless used as a username by choice)
Email addresses of students accessing via institutional game codes (only individual B2C accounts require email)
Location data beyond IP-derived country
Full payment card numbers (handled entirely by Stripe)
Full terminal transcripts, hidden test source, correct-answer banks, or full code files as part of the mission portfolio

3. How We Use Your Data

We process your data for the following purposes:

Providing the service: Authenticating users, tracking progress, displaying leaderboards, running battles, and managing teams
Educational analytics: Enabling teachers to monitor student progress and performance in real time
Learning portfolios: Helping students revisit practical evidence, reflect on learning, choose privacy settings, and prepare a student-selected print showcase
Platform improvement: Understanding usage patterns to improve features and content
Security: Detecting and preventing misuse, cheating, or unauthorised access
Communication: In-platform announcements and notifications from teachers

4. Legal Basis for Processing

We process personal data under the following legal bases:

Legitimate interests: Providing and improving the educational platform
Consent: Where required (e.g., optional analytics cookies)
Contractual necessity: Fulfilling our service to educational institutions

5. Data Sharing

We share data only in the following circumstances:

With teachers: Teachers can see their students’ usernames, progress, XP, activity data, and battle results within their class. Mission portfolio entries are shown only when marked Class teacher, and only while the student is in a class currently managed by that teacher. Entries marked Private are not returned to teacher portfolio views
With other students: Usernames, avatars, XP levels, and leaderboard positions are visible to classmates
Payment processor: We use Stripe to process payments. Stripe receives your payment details directly and is an independent data controller for that information
Service providers: We use Supabase (hosted in the EU) for database and authentication services
Legal requirements: If required by law, regulation, or legal process

We do not sell personal data to third parties or use it for advertising.

6. Data Retention

We retain student data for the duration of the educational programme plus 6 months for archival purposes. After this period, personal data is anonymised or deleted.

Teachers may request early deletion of their class data by contacting us.

Mission portfolio entries follow the same retention period. Changing an entry to Private changes who can view it within the Platform; it does not by itself delete the entry or shorten its retention period.

7. Data Security

We implement appropriate security measures including:

Password hashing: passwords are never stored in plain text
HTTPS encryption for all data in transit
Access controls limiting data visibility to authorised users
Regular security assessments

8. Your Rights

Under UK GDPR, you have the right to:

Access: obtain a copy of your personal data
Rectification: correct inaccurate data
Erasure: request deletion (“right to be forgotten”)
Restriction: limit processing in certain circumstances
Objection: object to processing based on legitimate interests
Data portability: receive your data in a structured, machine-readable format

To exercise any of these rights, contact us at info@cyberquest.club. We will respond within 30 days.

9. Children’s Privacy

CyberQuest is designed for use by students aged 14 and above within supervised educational settings. We rely on the educational institution and supervising teacher to ensure appropriate consent is in place for students under 18.

We do not knowingly collect data from children under 14.

10. International Transfers

Our primary data processing takes place within the UK and EU (via Supabase EU region). If any data is transferred outside these regions, we ensure appropriate safeguards are in place in accordance with UK GDPR.

11. Cookies

We use a limited number of cookies for essential functionality and optional analytics. For full details, see our Cookie Policy.

12. Email Communications

If you provide an email address when creating an individual account, we may send you:

Transactional emails: Account confirmations, password resets, payment receipts, and subscription changes. These are necessary for the service and cannot be opted out of
Product updates: New features, content releases, and platform announcements. You can unsubscribe at any time via the link in each email

We will never share your email with third parties for their marketing purposes.

13. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated to active users. The “Last updated” date at the top indicates when the policy was last revised.

14. Contact & Complaints

For privacy-related enquiries, contact us at info@cyberquest.club.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk if you believe your data rights have been violated.