Privacy Policy

Who we are

CYBERBOT LTD, a company registered in Scotland (company number SC565548), address: 20 Ayr Road, Giffnock, Glasgow, G46 6RY, United Kingdom. We operate the CyberBot website. Contact: [email protected].

What we collect

• Email address — to create your account and let you sign in. If you sign in with Google, we receive your email address and your Google account identifier.
• Password — stored only as a cryptographic hash (bcrypt). We never store or see your actual password. Accounts created through Google have no password at all.
• Phone number — optional. Only if you enter it yourself in your profile.
• Approximate location — the country and city we work out from your network address. We never ask your device for its location, and we store no coordinates and no street address.
• Device information — device model, operating system version and browser version.
• Network address (IP) — stored when you sign in, together with the country and city derived from it. We keep it for up to 90 days and use it only to detect referral abuse and protect payouts.
• Browser fingerprint — an anonymous hash computed in your browser (no raw device characteristics leave your device). Used together with the network address to spot several accounts run by one person.
• Withdrawal wallet addresses — the crypto addresses you have withdrawn to. Kept to protect payouts and to detect referral abuse.
• Notification token — an anonymous identifier issued by Firebase Cloud Messaging, so we can send you notifications.

What we do NOT collect

• Precise location, movement history, or your addresses.
• Contacts, photos, files, microphone, or camera.
• Card or bank details. We take no card payments and ask for no card data.
• Advertising identifiers. We run no ads and no third-party ad trackers.

Why we use it

To run your account, to send you notifications about the service, and to see basic usage statistics (how many devices, which countries, which browser versions). We do not sell your data and do not share it with data brokers.

Who else sees it

We may also disclose data where the law requires it. That is the only other case.

• Supabase — our database provider, stores the data described above.
• Google (Firebase Cloud Messaging) — delivers notifications to your device.
• Google Sign-In — only if you choose it; Google tells us your email address and account identifier.
• Resend — delivers our emails (confirmation and password reset codes).
• Cloudflare — protects and routes traffic to our server.

How long we keep it

Your account data is kept while your account exists. Email confirmation and password reset codes expire after 15 minutes. Delete your account and we delete your data.

Your rights

You can ask us to show, correct, or delete your data, or to stop processing it. Write to [email protected] and we will respond within 30 days. You can turn off notifications at any time in your browser settings — the site keeps working.

Deleting your account

Email [email protected] from the address you registered with and ask to delete your account. We remove your account, phone number, notification token, and device records.

Children

The site is not intended for children under 13, and we do not knowingly collect their data.

Changes

If this policy changes, we update the date at the top of this page. Material changes will also be announced on the site.