Privacy-first scam simulation.

Short version

• The current Android app does not declare internet, microphone, camera, location or contacts permissions.
• No personal user information is stored on our servers or shared by the app.
• The app stores gameplay progress locally on your device, such as path progress, XP, achievements and scenario history.
• The app does not ask you to enter real passwords, bank details, one-time codes, recovery phrases or payment-card data.
• The website does not load advertising or analytics cookies by default.
• If you email us about GDPR, app privacy, issues or deletion requests, we will process the information you send so we can respond.

Who we are

Cyber Scam Simulator is published under the Cyber Sentinel brand. The Android app is available on Google Play; no iOS app is currently available. For GDPR, app privacy, issue reports or deletion requests, contact w3buk.dev@gmail.com.

If the Google Play listing shows a different developer contact address, you may also use the contact address shown there.

Android app data

Data stored locally on your device

The app saves progress locally using Android app storage. This can include learning path choices, rank, XP, achievements, trophies, completed scenarios and recent gameplay state.

This local progress data stays on your device unless you back up, transfer or share your device data through Android or another service outside our control. You can remove local progress by clearing the app data or uninstalling the app.

Permissions and device features

The current build does not request dangerous Android permissions such as camera, microphone, contacts, location or phone/SMS access. Phone calls, texts, emails and social feeds inside the app are simulations, not real communications.

The app uses Android text-to-speech for simulated call audio. Speech output is generated by the text-to-speech engine installed on your device. We do not receive audio recordings or transcripts from that feature.

Official help links

The app includes official reporting and support links for scam victims. If you open those links, your browser or the destination website may process data under its own privacy policy.

Website data

This static website is designed to avoid unnecessary data collection. It does not include newsletter forms, account login, payment forms, embedded ad networks or analytics scripts by default.

Your hosting provider may create standard server logs when someone visits the site. These logs may include IP address, browser type, device information, date/time, requested page and referrer. Logs are normally used for security, fraud prevention, debugging and service operation.

If you contact us by email, we process your email address and message content so we can respond to GDPR requests, app privacy questions, issue reports, deletion requests, legal requests or safety/security matters.

Cookies and similar storage

This website uses essential local storage to remember your cookie/privacy preference. It does not set advertising cookies, behavioural tracking cookies or analytics cookies by default.

If optional analytics is added later, it should remain off until you choose to allow it. You can change your choice using the Cookie settings button in the footer.

Some browsers, security tools or hosting providers may use their own technical controls. Those are separate from this website’s own code.

Children and young people

The app is designed for cybersecurity education and scam-awareness practice. It is not intended to collect personal information from children.

Children and young people should use the app with a parent, guardian, teacher or responsible adult where appropriate, especially because scenarios can involve pressure, financial scams and social-engineering themes.

If you believe a child has sent personal information to us by email, contact w3buk.dev@gmail.com and we will review and delete it where required.

UK and EU privacy rights

Where UK GDPR, EU GDPR or similar laws apply, you may have rights to access, correct, erase, restrict or object to certain processing of your personal data. You may also have the right to withdraw consent where consent is the legal basis.

Because the current app stores gameplay progress locally and does not send it to us, many data rights can be exercised directly by clearing app data on your device. For email messages or website logs that we control, contact us using the address below.

You may also have the right to complain to your local data protection authority. In the UK, this is the Information Commissioner’s Office.

Security and retention

We aim to keep data collection minimal. Local gameplay data remains in the app’s local storage until you clear it or uninstall the app. Support emails are retained only as long as needed to respond, resolve issues, meet legal obligations and protect the service.

No website or app can be guaranteed completely secure. Avoid sending real passwords, bank details, one-time codes, seed phrases, recovery phrases or payment-card details to us.

Contact

For GDPR requests, app privacy questions, issue reports or deletion requests relating to information you sent to us, email w3buk.dev@gmail.com.

The app itself does not store or share user personal information with our servers. If you want to remove local gameplay progress, clear the app data in Android settings or uninstall the app.

If you are reporting a real scam or cybercrime, use official reporting channels and contact your bank, platform, employer or local law enforcement through known trusted routes.