Privacy
What we record, why we record it, and how long we keep it. In plain language, because a page about being careful online should not need a lawyer to read.
Last updated 25 August 2026
The short version. There are no accounts and no sign-up. We never ask for your name, your email, or your NRIC to play. We do not sell anything, we do not run advertising trackers, and we do not share what we collect with anyone. Everything below is about counting how many people played and how they did, so we know whether the games are teaching anything.
The games
Cyber Instincts and Spot the Red Flags record two things: that a page was opened, and that a round was finished. Each is one row in our database.
| What | Why |
|---|---|
| A random ID stored in your browser | To tell a page that was opened apart from a round that was finished, so we can see how many people start and do not finish. It is a random number, not linked to you. Clearing your browser data removes it. |
| Your score, accuracy, and difficulty | To see whether the games are too easy, too hard, or teaching the wrong thing. |
| Your country | Provided by Cloudflare from your connection. We only ever see the country, never a precise location. |
| Your device and browser | The User-Agent your browser sends on every request to every website. We keep it so we can tell whether something is broken on a particular phone or browser. |
| The time | To group results by day and month. |
We do not store your IP address with any of this.
The contact form
If you write to us, we keep the name, email address, and message you send, so we can read it and reply. That is the only reason we hold it.
The form uses Cloudflare Turnstile to keep automated spam out. To make its rate limit work we need some way to recognise repeat submissions, so we take your IP address, throw away the part that identifies your specific connection, keep only the wider network block it sits in, and scramble that. The result covers a few hundred connections at once, so it cannot be traced back to you, and it is the only form in which it is ever written down.
How long we keep it
Individual records are deleted after 180 days, automatically. That covers everything: game rounds, page visits, and messages sent through the contact form. Nothing is kept indefinitely at the level of a single person, a single visit, or a single message.
What we do keep is the monthly totals: how many people played in a given month, the average accuracy, the mix of devices. Those are counts, not records about a person, and they are what let us show that the games are working.
Who else sees it
Nobody. We do not sell, rent, or share what we collect. There are no advertising networks, no analytics products, and no social media trackers on these pages.
The site runs on Cloudflare, which necessarily handles the traffic in order to serve it and provides the country and spam protection described above.
Cookies
We do not use cookies. The games store one random ID in your browser's local storage, which is what the table above describes. It stays on your device and is never sent anywhere except to count a visit.
Your choices
- Clearing your browser data for this site removes the random ID and your saved best score.
- Playing in a private window means nothing persists between sessions.
- You can ask us what we hold about you, or ask us to delete it, using the contact form. If you have written to us, quoting the email address you used helps us find it.
Changes
If we start collecting something new, this page changes first, and the date at the top changes with it. If the games ever stop saying what they record, that is a bug, and we would want to know.
Contact
Questions about any of this go through the contact form.