games.neuralciberguard.org

Privacy

These games have no accounts, no analytics and no server of ours to send anything to. Your progress is written to your own browser and stays there. This page lists exactly what is stored, exactly what leaves your device, and how to read or erase all of it yourself.

The short version. Nothing you do here is transmitted to NeuralCiberGuard. Two features fetch public reference data from named third parties, which necessarily shows them your IP address — both are listed below, and both can be avoided by not using those features.

What is stored, and where

In your browser's localStorage, on this device only. It is never transmitted. Clearing your browser's site data for this domain removes all of it.

Key	What it holds	Written by
`ncg:games:pct:meta`	PCT rating, insight and level	PCT
`ncg:games:career:progress` `ncg:games:career:missions`	Career Roadster districts completed and XP	Career Roadster
`ncg:games:career:jet:progress` `ncg:games:career:jet:missions`	Flights completed, classifications, skills and XP	Career AeroJet-Sense
`ncg:games:settings:a11y`	Your theme, text size, motion and colour-palette preferences	All
`ncg:games:settings:input`	Any control keys you have remapped	All
`ncg:games:_meta`	Which storage-schema version your device is on, so an older save can be upgraded rather than discarded	The shared engine
Ciber Traversal keys	Operative profiles, experience tier, and a cache of public vulnerability data so the same request is not repeated. This game keeps its own progression and, at present, its own storage names — see the note below.	Ciber Traversal

None of these hold a name, an email address, a location or anything identifying. They hold scores, progress and preferences. If you use the optional local account panel on the hub, the name you type is also stored under this same origin and is likewise never transmitted.

One known gap, stated rather than hidden. The reset control on the hub removes every key beginning ncg:games: and then re-reads storage to prove the deletion. Ciber Traversal currently writes some of its data under its own names rather than that prefix, so those entries are not covered by that button and survive it. Clearing site data for this domain in your browser settings does remove them, and that route is complete today. Bringing Ciber Traversal onto the shared storage layer so the one button covers everything is open work, tracked against this page; until it lands, the browser-settings route is the one to rely on.

What leaves your device

Two features in Ciber Traversal fetch public reference data so that its training content reflects real, current advisories rather than invented ones. A request to any server necessarily reveals your IP address to that server.

Who	What is requested	What they can see
NIST — `services.nvd.nist.gov`	Public CVE records from the National Vulnerability Database	Your IP address and that a request was made. No account, no identifier, no game data is sent.
GitHub — `raw.githubusercontent.com`	CISA's published Known Exploited Vulnerabilities list	The same. Used only as a fallback when the NVD request fails.

Both are United States services, so those requests are handled outside Canada. The result is cached locally so the request is not repeated on every visit. No other game contacts any third party, and no game sends anything about your play to anyone.

Web fonts are loaded from Google Fonts, which also sees your IP address. Everything else — code, images, game content — is served from this domain.

Seeing and erasing your data

PIPEDA gives you the right to know what is held about you and to have it removed. Here that right is a button rather than a request form, because the data never leaves your device in the first place:

See it — the Your data panel on the games hub lists every key above and exports the whole lot as a file you can read.
Erase it — the same panel has a reset that removes every key and shows you the empty result afterwards, so the deletion is provable rather than promised.
Erase it without us — clearing site data for this domain in your browser settings has exactly the same effect. Nothing survives it, because nothing is held anywhere else.

Children

These games teach security awareness and are suitable for general audiences. Because no personal information is collected and no account is required, there is nothing held about a child to request, correct or delete.

Changes

If a game ever begins collecting or transmitting personal information, this page changes in the same commit as the code that does it. It is versioned alongside the site, so the history of what was disclosed is auditable.