Privacy Policy
You can read every free case file without an account and without being tracked. There are no advertising trackers and no analytics on this site. If you create an account we store your email and whether you have paid, nothing else. We never see your card details, and we don't sell anything about you to anyone.
1. Who is responsible for your data
This site is operated by Cyber Files ("we", "us"), an independent publication operated from India. For the purposes of the EU/UK GDPR we are the data controller; under India's Digital Personal Data Protection Act, 2023 we are the data fiduciary.
You can reach us at [contact address pending] for any privacy question or request.
2. What we collect
If you just read the site
Nothing that identifies you is collected by us. We run no analytics, no advertising pixels, and no tracking cookies. Our hosting provider (Cloudflare) processes technical request data such as your IP address for security and to deliver the page, this is standard for any website and is necessary to protect against attacks.
If you create an account
| Data | Why |
|---|---|
| Email address | To identify your account, verify it, and let you reset a password. |
| Display name and profile picture (only if you use "Continue with Google") | Supplied by Google so we can greet you correctly. |
| An account identifier | A random ID used to link your account to your access status. |
| Whether you have paid, and a purchase/licence reference | To decide whether to unlock the full case files. |
Passwords
We never receive, see or store your password. Sign-in is handled entirely by Google Firebase Authentication. If you sign in with Google, we don't even receive a password to ignore. This is deliberate: the safest way to hold a password is not to hold one.
Payment information
We never see your card number. Payments are processed by Gumroad, which acts as the merchant of record. We receive only confirmation that a purchase happened, the buyer's email address, and a licence reference. Your card details never touch this site.
3. Legal basis for processing (GDPR)
- Contract, account and purchase data is processed to provide the access you paid for.
- Legitimate interests, basic security logging to keep the site available and resist abuse.
- Legal obligation, retaining transaction records where tax or accounting law requires it.
We do not rely on consent for advertising or profiling, because we do not do either.
4. Who processes data on our behalf
| Processor | Role | Location |
|---|---|---|
| Google Firebase | Authentication, stores your login credentials | Global / US |
| Cloudflare | Hosting, security, and storage of your access status | Global edge network |
| Gumroad | Payments, invoicing and tax as merchant of record | US |
These transfers involve countries outside India, the EU and the UK. Each of these providers offers standard contractual protections for international transfers. We do not transfer your data to anyone else.
5. What we never do
- We do not sell, rent or trade your personal data.
- We do not run advertising networks or behavioural profiling.
- We do not send marketing email you did not ask for.
- We do not use your data to train machine-learning models.
6. How long we keep it
Account and access data is kept while your account exists. If you delete your account we remove it, except where we must keep a minimal transaction record to satisfy tax and accounting obligations. Cloudflare's security logs are short-lived and controlled by Cloudflare.
7. Your rights
Wherever you live, we will honour the following. You may ask us to:
- Access a copy of the data we hold about you;
- Correct anything inaccurate;
- Delete your account and associated data;
- Withdraw from any communication;
- Complain to your data protection authority, in India, the Data Protection Board; in the EU/UK, your national supervisory authority.
Email [contact address pending] and we will respond within 30 days. We may need to confirm you control the account before acting, to stop someone else deleting your data.
8. Cookies and similar technology
We set no advertising or analytics cookies, which is why this site has no cookie banner. If you sign in, Firebase stores a session token in your browser so you stay logged in. That token is strictly necessary for the login to work; clearing your browser storage signs you out.
9. Children
This site is not directed at children, and accounts are intended for users aged 18 or over. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will remove it.
10. Security
Paid content is served only after a cryptographically verified sign-in; it is not merely hidden in the page. Sign-in is delegated to Google. The site is served over HTTPS. No system is perfectly secure, but we have deliberately designed this one to hold as little of your data as possible, the strongest protection for information is not to collect it.
11. Changes
If we change this policy we will update the date at the top. Material changes affecting account holders will be notified by email.