Privacy Policy

Cybermaker (“Cybermaker”, “we”, “us”, or “our”) operates the website and platform at cybermaker.club. We provide step-by-step maker tutorials covering electronics, robotics, and IoT for hobbyists, students, and professionals.

If you have any questions about this Privacy Policy or your personal data, please contact us at hello@cybermaker.club.

We collect information in the following ways:

Information you provide directly

• Account registration — When you create a Cybermaker account we collect your email address and any display name you choose. We do not collect your password in plain text; it is hashed and stored securely by our authentication provider.
• Communications — If you contact us by email or a support channel we retain that correspondence.

Information collected automatically

• Log data — Standard web server logs including your IP address, browser type, referring URL, pages visited, and timestamps. This data is used for security monitoring and diagnosing technical issues.
• Session cookies — We use cookies and browser storage to keep you signed in between visits. These are essential for the platform to function and cannot be disabled while using your account. See Section 5 for more detail.
• Usage data — We may record which tutorials and collections you view in order to personalise your experience and track your learning progress.

Information we do not collect

• We do not collect payment card details directly. Any future payment processing will be handled by a certified third-party provider.
• We do not collect government ID, date of birth, or sensitive personal data.
• We do not sell your personal data to third parties.

We use the information we collect to:

• Create and manage your account, and authenticate you when you sign in.
• Provide, operate, and improve the Cybermaker platform and its content.
• Track your progress through tutorial collections.
• Send transactional emails such as email confirmation, password reset, and important account notices. We will not send marketing emails without your explicit consent.
• Monitor platform security, detect fraud, and fix technical problems.
• Comply with legal obligations.

We rely on the following legal bases under applicable data protection law: (a) performance of a contract — to provide the service you signed up for; (b) legitimate interests — for security monitoring and improving the platform; and (c) your consent — for optional communications.

We do not sell, rent, or trade your personal information. We may share data only in the following limited circumstances:

• Service providers — We use trusted third-party services to operate the platform, including Supabase for database and authentication hosting. These providers process data on our behalf under data processing agreements and may not use it for their own purposes.
• Legal requirements — We may disclose information if required to do so by law or in response to valid legal process (e.g., a court order or government request).
• Business transfers — If Cybermaker is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. We will provide notice before your data is transferred and becomes subject to a different privacy policy.
• Protection of rights — We may share information where we believe it is necessary to prevent harm, enforce our Terms of Service, or protect the rights and safety of our users or the public.

Cybermaker uses cookies and browser local storage solely to keep you authenticated between sessions. Specifically:

• Authentication cookies — Set by our auth provider (Supabase) when you sign in. They contain an encrypted session token and expire when you sign out or after a defined inactivity period.
• Preference storage — We may store minor UI preferences (such as dark mode selection) in your browser’s local storage. No personal data is stored there.

We do not use advertising cookies, third-party tracking pixels, or analytics cookies. You can disable cookies in your browser settings, but doing so will prevent you from signing in to your account.

We retain your personal data for as long as your account is active or as necessary to provide the service. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal or compliance purposes (for example, in backup systems, which are purged on a rolling schedule).

Log data (IP addresses, access logs) is retained for up to 90 days for security purposes and then deleted.

Depending on where you live, you may have the following rights regarding your personal data:

• Access — Request a copy of the personal data we hold about you.
• Correction — Ask us to correct inaccurate or incomplete data.
• Deletion — Ask us to delete your account and associated personal data.
• Portability — Request your data in a structured, machine-readable format.
• Objection / Restriction — Object to or ask us to restrict certain processing of your data.
• Withdraw consent — Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, email us at hello@cybermaker.club. We will respond within 30 days. If you are in the EU/EEA or UK, you also have the right to lodge a complaint with your local data protection authority.

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. These include encrypted data transmission (HTTPS/TLS), hashed passwords, row-level security on our database, and private storage with signed access URLs.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. If you believe your account has been compromised, please contact us immediately.

Cybermaker is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at hello@cybermaker.club so we can delete it promptly.

Your information may be transferred to and processed in countries other than your own. Our infrastructure is hosted on services that may store data in various regions. Where required by applicable law, we ensure appropriate safeguards are in place (such as standard contractual clauses) to protect your data during international transfers.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you by email or a notice on the platform.

We encourage you to review this policy periodically. Your continued use of Cybermaker after any changes constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please get in touch: