Terms of Service Summary

Last Updated: October 12 2022

Please read these terms and conditions and our Privacy Policy and Cookie Policy carefully before using this site or registering for Cyber FastTrack. These terms tell you the rules for using this website https://www.cyber-fasttrack.org and the rules and eligibility criteria for participating in the Cyber FastTrack program.

Our terms of service is backed by our policy framework, including our privacy and cookies policy. This document will be updated as the site and services it provides access to are changed.

By using this site and choosing to register for the Cyber FastTrack program, you agree to these terms and associated policies referred to above. If you break the rules outlined below and in the detailed policies referred to above, we may suspend your access to the program and its associated third-party services, and, in severe cases, refer information to the relevant legal authorities.

We may make changes to these terms.

We may amend these terms and our policies from time to time. If the changes are significant, we will notify you by email if you have already registered for the Cyber FastTrack program.

Who can participate in Cyber FastTrack

To participate in Cyber FastTrack as a student:

  • You must be at least 18 years of age as of January 11 2024
  • You must be enrolled in an accredited U.S. college
  • You must be a U.S. citizen or permanent resident
  • You must have completed the student registration form by no later than January 11 2024
  • You must agree to receive essential program communication via our selected provider Active Campaign

When you register, you are required to give accurate information about yourself for purposes of safeguarding and to validate your eligibility for the program.

As part of the program, you will be provided with access to software and training content. You agree that this material will be used solely by you, the registered user, and not shared with other parties.


By registering an account and agreeing to these terms, we will provide you with a licence to access CyberStart, a third-party online service which contains training material, challenges and games.

Post-registration and using your CyberStart account to access the service and materials, you will be provided with material and tools that, applied unethically or without consideration, could result in violation of (amongst others) the Computer Fraud and Abuse Act of the United States or the Computer Misuse Act 1990 of the United Kingdom. By registering for this program, you agree that you will not use any of the information provided, tools or techniques against other individuals or organizations without consent to do so.

By registering for Cyber FastTrack, you agree that you will comply with our Policies and Terms & Conditions, and that failure to do so could result in termination of your access, or sharing of your information with the relevant legal authorities. Examples of abuse include, but are not limited to, launching a denial of service, or purposeful attempts to disrupt the service.

By registering for the program and providing accurate details, you will be given access to this material free of charge, and you must agree to comply with the Terms and Policies of CyberStart.

By registering for the program and providing accurate details, you will be given access to this material free of charge, and you must agree to comply with the Terms and Policies of the CyberStart product.

In order to participate in and be eligible for the program, you must agree to receive essential program communication via our selected provider, Active Campaign. If you opt out of these emails or unsubscribe from them, you will not receive essential program communication and will become ineligible to participate and ineligible to be considered for prizes and awards.

By registering for the program, you may be assigned a license to the CyberStart product. The license you are issued is for the purposes of the program and bound by the timeframes, eligibility criteria and scholarship or award criteria. Your license may be revoked for failure to comply with these terms, or otherwise at the end of your interaction with the program. CyberStart operates under a commercial license, and your right to access and use the licensed material on the platform or any other expressions based on the product end with your license termination. You may continue to access your CyberStart account and the non-licensed content in accordance with the Terms and Policies of CyberStart.

Acceptable use

As part of this program, subject to eligibility criteria, you may be granted a temporary licence to CyberStart. CyberStart provides educational material and security related puzzles or challenges. As part of these challenges you may be required to apply unusual tools or use patterns to services to uncover logic flaws or issues. With your licence, you are provided permission to undertake the activities covered in each of the 'briefings' against the defined targets. As covered in the product-specific licences and user guides, it is not acceptable to attempt denial of service attacks, or to purposefully attempt to cause damage to the infrastructure or data. It is also deemed a violation of acceptable use to identify flaws and to purposefully attempt to damage or disrupt other platform users, or their data.

Uncovering security flaws and learning about cybersecurity vulnerabilities will require use of certain tools that can only be used in a context where permission has been given by the target party, as is provided here. In severe circumstances where error cannot be blamed, violation of these terms could result in rejection from the program, or prosecution. If you are unsure of the activity you are undertaking at any time please contact support@cyber-fasttrack.org.

How your data will be used

An outline of what data we will collect and how we will use it is included in our privacy policy. The data will be held by Cyber FastTrack and CyberStart Limited for the purposes of running the program. Your information will be passed to Active Campaign in order to provide you with essential messaging in relation to running of the program, as per the terms of our Privacy Notice.

How you may use material on the Cyber FastTrack website

We are the owner or the licensee of all intellectual property rights in the Cyber FastTrack website, and in the material published on it. Those works are protected by copyright laws and treaties around the world. All such rights are reserved.

You may print off one copy, and may download extracts, of any page(s) from our site for your personal use and you may draw the attention of others within your organization to content posted on our site.

You must not modify the paper or digital copies of any materials you have printed off or downloaded in any way, and you must not use any illustrations, photographs, video or audio sequences or any graphics separately from any accompanying text.

Our status (and that of any identified contributors) as authors of content on our site must always be acknowledged.

You must not use any part of the content on our site for commercial purposes without obtaining a licence to do so from us or our licensors.

If you print off, copy or download any part of our site in breach of these terms of use, your right to use our site will cease immediately and you must, at our option, return or destroy any copies of the materials you have made.

Contact information

If you have any questions about these terms or any associated policy, please contact support@cyber-fasttrack.org.

Privacy Policy

Last Updated: October 12 2022

Cyber FastTrack is committed to protecting your privacy and complies with the principles of all applicable data protection laws and regulations, including the Family Educational Rights and Privacy Act (FERPA). We commit to holding the minimum amount of data that we can from you, and we are committed to ensuring that your data is handled properly and any information we hold is stored securely and used in a lawful and ethical way.

This Privacy Policy explains how we collect data, why we collect it, how it is used, who has access to it, and how long it is kept for. By using this website or registering for Cyber FastTrack, you consent to Cyber FastTrack processing your data. Cyber FastTrack complies with all applicable laws and regulations in our collection, management, and storage of your CyberStart game account data (name and email address). Additionally, we adhere to FERPA guidelines when collecting and storing any extra student educational records required to operate the program, including directory information where provided by the participant's school.

Who is holding my data?

Your information is being collected by Cyber FastTrack to help run and deliver information security talent assessment and training programs. The program is delivered by the National Cyber Scholarship Foundation, a charitable foundation based in the United States of America at 8300 Douglas Avenue, Suite 800, Dallas, TX 75225, and CyberStart Limited, based in the United Kingdom at The Old Bull Pens, Sezincote, Moreton-In-Marsh, Gloucestershire, GL56 9AW. CyberStart Limited acts as the controller of your data, and the National Cyber Scholarship Foundation acts as a processor of your data.

This program and the prior mentioned parties will maintain information that you provide to us, and data collected during your interaction with the provided services. This is collected for the operational purposes of security and safeguarding, but primarily for the running of the talent identification and training outlined on this website.

We use Amazon Web Services to host our registration service and store data.

We use Tableau to analyse and report on program registration, progress, and outcomes data.

We use a company called Active Campaign to send you important information about the program. This is information that you need to participate in Cyber FastTrack.

The National Cyber Scholarship Foundation and other organizations, such as cybersecurity employers, may offer prizes which you could be eligible for. In the event that these become available and applicable to you, you will be contacted by email with a link to complete an application form, on which you will be asked for your consent to provide your data for you to receive your prize.

We will always ask for your permission before sending your information to any other organization, or for any use case other than what is outlined above. We may on occasion offer you invitations to access or join third party services and/or platforms that may be of interest to you as a participant of Cyber FastTrack. Your use of these services is entirely optional and will not affect your access to or eligibility for Cyber FastTrack. We may send you information related to our programs and further suitable opportunities for you, which you may terminate at your discretion.

What information do you collect about me?

The types of information we hold about you include:

  • When you register for the program, we collect your first name, last name, email address, date of birth, college information, state information, your gender, race and ethnicity, and whether you want to join any of our communities.
  • Information on how you use and experience this website and its forms, including server logging that may contain basic data such as IP address, date and time, the URL or path of the resource or file accessed, browser information, or error information.
  • Marketing Information including tracking and cookie data that we collect when you use our website.

Who are you sharing my personal data with?

When you register with Cyber FastTrack, we will share your name and email address with CyberStart in order to create your account and provide you with a licence to the content on the CyberStart product.

If you ask to join one of our communities as part of your registration, we will share your name and email address with our community platform service, Bettermode (formerly known as Tribe). Your details will be shared only if you ask to join a community, and you can leave the community and ask Bettermode to remove your data at any time without changing your eligibility for Cyber FastTrack.

Facebook Lookalike & Custom Audiences

Facebook Lookalike & Custom Audiences enables us to use existing datasets of users over the age of 18 to compile groups and lists of users based on certain criteria in order to provide users with similar interests and preferences with relevant information on Facebook’s services. Before transmission to Facebook, the data is irreversibly encrypted in the form of hash values (encrypted numeric values) on our computers. The data of minors is not used for this purpose.


We get your information from your registration form, from your use of the website and materials, and from details of your progress in the program. For us to process your data we need to get your consent or permission to use your information on behalf of all those involved. We can't enrol you in the program and keep you up to date without your registration information, and we also need to monitor your progress.

Whether you choose to join or leave the program is entirely up to you. The only effect of asking us to delete your information would be that you are no longer able to be a member of the program. You are entitled to do this at any point in support of your right to be forgotten.

You must meet the program eligibility criteria in order to register, including the criteria that you are of an age which can consent to provide your data. For this reason, we ask for your date of birth.

We've tried to make this notice easy to read, but you can always contact the Data Protection Officer via support@cyber-fasttrack.org who will help explain things further and will answer your questions.

Leaving the program and removing your information

If you change your mind about allowing us to use your information, you simply need to tell us by emailing support@cyber-fasttrack.org. We will then take you through a couple of quick steps to confirm you want to delete your information and leave the program.

We'll update you when this has been done, or in exceptional circumstances if we can't do this.

Why do you need my information anyway?

We need it to run the program outlined on this site. The National Cyber Scholarship Foundation and CyberStart Limited will need your data to run the program, to assess eligibility, and to invite you to apply for scholarships and awards based on your performance in the program.

Program user data are not being used for other commercial purposes, and at no time will Cyber FastTrack share or otherwise transfer students' personally identifiable information or directory information to a third party for advertising or marketing purposes.

If you don't want us to hold your information, you will no longer be able to participate in the program, you will not be invited to apply for any prizes related to the program, and we will delete your records from the system.

What security measures are you taking?

We carry out regular security assessments to make sure your information is secure. We follow all the standard industry practices to make sure we hold your information as securely as possible.

Security incidences

We will always inform you as quickly as possible if we discover any security incidence that has affected your data. We will take all action that we can to reduce risks and we will let you know if you need to take any action to protect yourself as a result.

The security of your data, including personally identifiable information, is important to us. User accounts are protected by a password. Users are required to protect the confidentiality of their passwords.

We will endeavor as best as we can, in accordance with applicable rules, regulations and laws, to maintain appropriate electronic and managerial policies and procedures to ensure that your data, including personally identifiable information, is kept secure in accordance with commercially reasonable information technology standards.

If Cyber FastTrack becomes aware of a systems security breach by an unauthorized party or that any user data was used for an unauthorized purpose, we will comply with relevant state and other data breach laws. We will notify users of any breach resulting in unauthorized release of data electronically, at minimum, and without unreasonable delay so that you can take appropriate steps. The notification will include: date of the breach, the types of information that were subject to the breach, general description of what occurred, and steps Cyber FastTrack is taking to address the breach.

How long will the information be held?

We keep your information for five years or until you ask us to delete it, if this is sooner, and you wish to leave the program. If the circumstances arise where we need to keep the data longer, we will tell you and explain why.

Change of control

Over time, Cyber FastTrack may grow and reorganize. We may share your information, including personal information with affiliates such as a parent company, subsidiaries, joint venture partners or other companies that we control or that are under common control with us, in which case we will require those companies to agree to use your personal information in a way that is consistent with this Privacy Policy.

In the event of a change to our organizations such that all or a portion of Cyber FastTrack or its assets are acquired by or merged with a third-party, or in any other situation where personal information that we have collected from users would be one of the assets transferred to or acquired by that third-party, this Privacy Policy will continue to apply to your information, and any acquirer would only be able to handle your personal information as per this policy (unless you give consent to a new policy). We will provide you with notice of an acquisition within thirty (30) days following the completion of such a transaction, by posting on our homepage and by email to your email address that you provided to us. If you do not consent to the use of your personal information by such a successor company, subject to applicable law, you may request its deletion from the company.

In the unlikely event that Cyber FastTrack goes out of business, or files for bankruptcy, we will protect your personal information, and will not sell it to any third-party.

What about my other rights?

You have a right to have a copy of the information which Cyber FastTrack holds on you or to transfer your information. You can make a request for a copy of your data through support by emailing support@cyber-fasttrack.org.

What if I want more information or I want to complain?

If at any time you want further information, or you need help understanding what you can and cannot request, or if you want to make a complaint, the Data Protection Officer can help you with this.

You can be asked to be put in contact with our Data Protection Officer via our support channels. Please email support@cyber-fasttrack.org and ask to be put in contact with the Data Protection Officer.

If you still aren't happy with our response you can complain to your local data protection authority.

Cookies Policy

Last Updated: October 12 2022

Cyber FastTrack uses cookies as part of the delivery of the service. By using the service you agree to the use of Essential Cookies that are a requirement for the platform to operate.

Additional cookies may be used to optimize the site experience, help us understand where we can improve Cyber FastTrack, and for certain marketing activities, but this is undertaken only with your consent when you visit the site. You do not need to accept these optional cookies to use Cyber FastTrack, and we provide you with an opportunity to opt out of these optional cookies.

What are cookies?

Cookies are small pieces of text sent to your web browser by a website you visit. A cookie file is stored in your web browser and allows the service or a third-party to recognize you, makes your next visit easier and renders the service more useful to you.

Cookies can be either 'persistent' or 'session' cookies. Persistent cookies may remain on your hard drive until you erase them or they expire. Session cookies are temporary cookie files, which are erased when you close your browser.

Essential cookies

When you visit the website we will ask you to set your cookie preferences. In order to access Cyber FastTrack there are some cookies that are Essential and you will need to agree to their use if you wish to access Cyber FastTrack. We use these cookies:

  • To enable certain functions of the service to operate
  • To provide analytics and store your preferences
  • To understand which of our partners referred you to the program

Most of our Essential Cookies are delivered from 'cyber-fasttrack.org' and you will be able to identify them from this reference.

The following Essential cookies are provided by third-parties:

  • To allow you to opt-in or opt-out of optional cookies, provided by Civic Cookie Control
  • To provide anonymous analytics for us to monitor the usage of and errors shown by this site, provided by Google Analytics

We use both session and persistent cookies on the service and we use different types of cookies to provide these Essential cookies. Blocking our Essential cookies may prevent you using our service or may cause problems with your experience of our service.

Optional cookies

Cookies are managed through our cookie banner that will allow you to 'opt-in' or 'opt-out' of non-essential cookies. At present our non-essential cookies are limited to selected third-parties that we work with to provide us with information about the use of our site to help improve the program.

Our non-essential cookies belong to third-party companies and are used to track how people find and use the website. These companies include:

  • Audience building (see "Facebook Lookalike & Custom Audiences" in the privacy policy) and measuring effectiveness of marketing activities with Facebook, Snapchat, Instagram, Twitter, and Google Ads.
  • Analytics and screen recordings with HotJar of how you interact with this website so we can make improvements to the usability and experience of the site
  • Google Analytics for marketing purposes

You do not have to agree to any non-essential cookies, and if you do not consent it will have no effect on your ability to participate in the program. If you previously opted-in to non-essential cookies, and then later decide to opt-out of these non-essential cookies, you may need to manually remove those third-party cookies using your browser's cookie preferences and clearing settings; due to how third-party cookies work, we are not able to delete or remove these cookies for you from your browser after they have been previously set.

You can delete cookies or instruct your web browser to delete or refuse cookies. To do this you should visit the help pages of your web browser. There are lots of tools and plug-ins available to manage or restrict cookie behaviour.