Terms, Privacy & Cookies

Last updated: 20 October 2026

CyberHeaven (“CyberHeaven”, “we”, “our”, “us”) is a free, community-driven, volunteer-run cybersecurity learning website. This page covers three things: the terms for using the site, our privacy practices, and cookies. The short version: everything here is free, we don’t track you, and we don’t set cookies.

Terms

Using CyberHeaven

By using CyberHeaven or joining our community spaces, you agree to these terms. If you don’t agree, please don’t use the site.

All articles, guides, tools and resources on CyberHeaven are free. There are no accounts, payments, subscriptions or paid courses.

Ethical and lawful use

CyberHeaven teaches cybersecurity for lawful, ethical purposes. You agree not to use anything you learn here to:

Attack, scan or access systems you don’t own or don’t have written permission to test.
Carry out or encourage illegal activity.
Share stolen credentials, personal data or confidential information.
Create or distribute malicious software.

Practise only in environments you are authorised to use, such as your own lab or a legal training platform. You are responsible for how you apply what you learn.

Community guidelines

When you take part in our Discord or other community spaces, treat others with respect, share knowledge responsibly and give constructive feedback. Harassment, hate speech, discrimination, spam, doxxing, sharing malware or illegal content, and disruptive behaviour are not allowed. Breaking these guidelines can lead to a warning, suspension or removal from the community.

Content and contributions

Unless stated otherwise, the content, branding and design of CyberHeaven belong to CyberHeaven and its contributors. You are welcome to link to and share our articles. Please ask before republishing them in full or using them commercially.

When you contribute an article, edit or resource, you confirm it is your own work (or that you have the right to share it) and you allow CyberHeaven to publish, edit and keep it on the site. Contributors are credited by name.

Responsible disclosure

Found a security issue on CyberHeaven? Please report it privately to cyberheavenhq@proton.me before making it public. Act in good faith, avoid disruption, don’t access more data than needed to show the issue, and give us reasonable time to fix it.

No guarantees

CyberHeaven is provided “as is” by volunteers. We work hard to keep content accurate and the site available, but we can’t guarantee that it is always error-free or online, or that it will lead to a particular job, certification or outcome. To the fullest extent permitted by law, CyberHeaven is not liable for any loss arising from your use of the site.

Disputes should first be raised with us so we can try to resolve them in good faith. If any part of these terms is found to be unenforceable, the rest still applies.

Privacy

What we collect

Very little. CyberHeaven is a static website with no CyberHeaven accounts, sign-up forms, newsletters, analytics or advertising trackers.

When you visit: like almost every website, our hosting provider may keep standard server logs (such as IP address, browser type and the pages requested) for security and to keep the site running. We don’t use these logs to identify or profile visitors.
When you email us: we receive your email address and whatever you choose to write. We use it only to reply and, if you are contributing, to work with you on your contribution.
When you join our Discord: Discord processes your information under its own privacy policy. Messages you post in community spaces may be visible to other members, so don’t share more personal information than you need to.
When you comment on an article: comments run on giscus, which stores them as GitHub Discussions. You sign in with your GitHub account, and your comment, username and profile picture are public. GitHub’s privacy policy applies. The comment box only loads when you scroll down to it.
When you watch a video: video previews show a thumbnail image loaded from YouTube. The video player itself (from youtube-nocookie.com) only loads when you press play, and from then on YouTube’s privacy policy applies.
When volunteers edit the site: contributors who sign in to our content editor do so with their GitHub account. Their name and edits are recorded in the site’s public Git history.

How we use it

Only to run the site, keep it secure, answer messages and publish contributions. We never sell your information or share it for marketing.

Your rights

Depending on where you live, you may have the right to access, correct or delete personal information we hold about you, to object to or restrict how we use it, and to complain to your data protection authority. To make a request, email cyberheavenhq@proton.me and tell us what you need.

Children

CyberHeaven is free for everyone to read. We don’t knowingly collect personal information from children. If you believe a child has sent us personal information, contact us and we will delete it.

Other websites

We link to many free resources run by others. We’re not responsible for their content or privacy practices, so check their policies when you visit them.

Cookies

CyberHeaven doesn’t set cookies and doesn’t use tracking or analytics tools. Fonts and site scripts are served from our own site.

Two optional third-party features may set their own cookies under their own policies: the comments (giscus and GitHub, if you sign in to comment) and YouTube videos (only once you press play).

If you are a volunteer using the content editor at /admin, it stores your sign-in session in your browser’s local storage so you stay signed in. That storage stays on your device and you can clear it at any time from your browser settings.

Our interactive tools (such as the career quiz and Spot the phish) run entirely in your browser and don’t save or send your answers anywhere.

Changes and contact

We may update this page as the site changes. When we do, we’ll change the “Last updated” date at the top.

Questions about any of this? Email cyberheavenhq@proton.me.