Privacy and cookie policy
Last updated: October 5, 2026
This policy explains what personal data Cibertest processes, for what purpose and what choices you have about it, including the cookies and the advertising shown on the platform.
1. Who is responsible
Cibertest (cibertest.com) is the controller of your personal data. For any privacy matter, including exercising your rights, write to us at [email protected].
2. Data we collect
Account data: username, email address and password (we only store a hashed version, never the password itself). We also keep the history of changes to your username.
Profile data, if you choose to add it: display name, photo or avatar, bio, country, time zone and preferred language.
Activity data: the exams and tests you take, your answers, results, scores, streaks and badges, your position in rankings and competitions, your review decks and practice routes, the content you submit and, if you have one, the status of your membership.
Technical data: IP address, browser and device, the date and time of your sessions, and the server logs needed to keep the platform running and secure.
3. What we use it for and on what basis
To provide the service: keep your account and profile, save your progress, compute rankings and send you emails about your account. The basis is performing the terms and conditions you accept.
To protect the platform against abuse, fraud and automated access. The basis is our legitimate interest in keeping the service secure.
To fund the service through advertising (section 6). The basis is your consent where the law requires it; otherwise, our legitimate interest in offering a free service, which you can object to.
To meet legal obligations and handle claims. The basis is legal obligation.
4. What is public
Your username and your stats (points, streak, badges and ranking position) are shown on your public profile and in the rankings, and anyone can see them. The optional details of your profile may be shown next to your username. Content you publish appears with your username as its author.
5. Cookies and local storage
We use essential first-party cookies, which do not require consent: the session cookie (cibertest-session, 2 hours), the request forgery protection cookie (XSRF-TOKEN, 2 hours) and, if you tick "Remember me", the cookie that keeps you signed in (remember_web_…, 30 days).
We also store in your browser's local storage your appearance preference (light or dark mode) and, while you review, the answers waiting to be sent. This data stays on your device until it syncs with your account and is not used for advertising.
Cloudflare protects the site and, on the sign-in, registration and password recovery forms, uses Turnstile to tell people and bots apart. To do so it analyzes technical data such as your IP address and browser, and it does not use it for advertising.
Google and its advertising partners may set third-party cookies in your browser, including those that store your consent choices, as described in sections 6 and 7.
6. Advertising
Cibertest shows ads from Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites.
Advertising cookies enable Google and its partners to serve ads to you based on your visits to Cibertest and other sites on the Internet. You may opt out of personalized advertising in Google Ads Settings, and out of other vendors' personalized advertising at aboutads.info.
Users with an active membership do not see ads. We do not respond to browser "Do Not Track" signals; to limit personalized advertising, use the options in this section and the next one.
7. Consent
If you visit us from the European Economic Area, the United Kingdom or Switzerland, we ask for your consent before using advertising cookies, through a consent management platform certified by Google.
You can withdraw or change your consent at any time from the privacy options link shown on the page. Withdrawing it does not affect anything done before.
8. Who we share your data with
We do not sell your personal data. We only share it with the providers we need to run the platform, and when the law requires us to. These providers are: web hosting, email delivery, Cloudflare (content delivery and bot protection) and Google (advertising).
Some of these providers, such as Google and Cloudflare, process data outside your country, including in the United States. We only work with providers that offer appropriate safeguards, such as standard contractual clauses.
9. How long we keep it
We keep your account data while your account is active. Sessions expire after 2 hours of inactivity, or after 30 days if you ticked "Remember me".
If you deactivate your account, you will not be able to sign in and we will stop showing your public review decks and practice routes, but we will keep your data so you can reactivate it. If you want it erased, ask us to delete your account (section 10).
When we delete your account, we erase or anonymize your personal data. Content you have published stays without your name, as the terms and conditions explain. We only keep what we need to meet legal obligations or resolve claims, for as long as they require.
10. Your rights
You can access your data, correct it, ask us to delete it, object to its processing, ask us to restrict its use and receive it in a format you can take to another service. You can also withdraw your consent at any time.
You can edit much of your data yourself from your account settings. For anything else, write to [email protected] from your account's email address. We will reply within the time limits set by law.
If you believe we have not handled your data properly, you can complain to the data protection authority in your country, such as your supervisory authority if you are in the European Union or the Information Commissioner's Office if you are in the United Kingdom.
11. Minors
You must be at least 14 years old to create an account on Cibertest. We do not knowingly collect data from children under 14. If we find out that one has created an account, or if their parents or guardians tell us at [email protected], we will delete it along with its data.
If you are between 14 and 17, your parents or guardians must know about and allow your use of Cibertest.
12. Changes
We may update this policy. The date of the last update appears at the top of this page. If a change is significant, we will notify you by email or with a notice on Cibertest.