This policy describes how Cybush (https://cybush.uk), operated by Simon Bushell, handles information when you use the service.
What we collect
Depending how you sign in, we may collect:
- Google Sign-In: email address, name, profile image URL (if provided), and a stable Google account identifier that you authorize Google to share with us
- Email and password: the email address and display name you provide, and a securely hashed password (we never store your password in plain text). We do not receive or store passwords for Google or other third-party accounts
- Session cookies so you stay signed in, account status (for example invited, pending, approved, or denied), and basic operational data such as last sign-in time
- Content and preferences you create in product apps you are granted access to (hosted under *.cybush.uk), tied to your account
If you use a magic link or password-reset email, we process your email address only to deliver that message and complete the sign-in or reset flow.
How we use it
- Authenticate you and keep you signed in
- Create and manage your Cybush account
- Control access to the launcher and private apps (invitation, admin approval, and per-app grants)
- Provide the apps you are allowed to use and store the data you create in them
- Contact you about access decisions or security-related account actions when email is configured
- Secure and operate the service
We do not sell your personal information. We do not use your account data or app content for advertising.
Product apps
When an administrator grants you access, you may open product apps under *.cybush.uk, operated by the same party (Simon Bushell). Those apps may store content you create while signed in. That data is tied to your account and held on Cloudflare infrastructure. Access is controlled from this portal; product data lives in our suite databases, not with Google.
We use this data only to provide the apps you are granted, to keep the service secure, and (where configured) to send transactional email about access. We do not sell app content or use it for advertising.
Sign-in methods
You may sign in with Google and/or with an email address and a password for Cybush. If you use Google, Google’s handling of your data is described in the Google Privacy Policy. We only request the limited profile information needed to sign you in. Setting a Cybush password does not change or access your Google password.
Transactional email (for example magic links or invitations) may be sent through our email provider (currently Resend) solely to deliver those messages.
Storage and security
Data is stored using our hosting provider (Cloudflare) and related infrastructure. We use industry-standard protections such as HTTPS, HTTP-only session cookies, and hashed passwords for email sign-in. No method of transmission or storage is 100% secure.
Sharing
We share data only as needed to run the service (for example with our hosting and email providers), to comply with law, or to protect the service and its users. Site administrators can see account details required for access control.
Retention
We keep account, session, and app data while your account exists and as needed to operate and secure the service. You may request deletion of your account and associated app data by emailing admin@cybush.uk.
Your choices
- Sign out of Cybush at any time
- If you use Google Sign-In, revoke app access in your Google Account permissions settings
- Reset a Cybush password using the forgot-password flow on the sign-in page
- Request account deletion or a copy of your data by emailing admin@cybush.uk
Changes
We may update this policy from time to time. The “Last updated” date at the top will change when we do. Continued use after changes means you accept the updated policy.
Contact
Questions about privacy: admin@cybush.uk.