C-YAC — Cyber Youth Advisory Council

About

Mon, 01 Jan 0001 00:00:00 +0000

What C-YAC is

The Cyber Youth Advisory Council. A working council of students aged 12–17 who train as digital protectors, run workshops for younger students and parents, build public portfolios, and feed into an internship pathway.

C-YAC is not a club. It’s an engine — a way for the cybersecurity community to compound its reach into the next generation, and a way for that generation to find a community that takes them seriously.

Contact

Mon, 01 Jan 0001 00:00:00 +0000

Send us a note

One sentence about your situation is enough to get a conversation going. Student, parent, school, library, community group, sponsor — whichever fits.

For Host Organisations

Mon, 01 Jan 0001 00:00:00 +0000

A C-YAC chapter needs three things from a host organisation: a room, an adult lead, and a critical mass of curious students aged 12–17. We provide the rest.

Who hosts chapters

Schools — public and private, primary into secondary.
Home-schooling co-ops, microschools, and learning pods — chapters at the co-op or microschool level, run inside your community at its own pace.
Community youth groups — faith-community youth groups, scouts, sports clubs, community-centre teen programmes.
Library teen programmes — increasingly common. Libraries already do teen-focused programming; this slots in.

Setup

A founding cohort of four to twelve students. Smaller works for the pilot term; expand once it lands.

For Parents

Mon, 01 Jan 0001 00:00:00 +0000

C-YAC — the Cyber Youth Advisory Council — is for students aged 12–17 who want to be more than passive recipients of digital-safety messaging. They want to teach the year below them. They want to inform the adults around them. They want a portfolio.

If that sounds like your student, this page is for you.

What it asks of your student

Time. Two to four hours a month is the baseline. More if they want to lead a workshop, host a parent night, or take on a portfolio project — and many do, by choice.

For Students

Mon, 01 Jan 0001 00:00:00 +0000

You already know more about how these platforms feel from the inside than most of the adults in your life. What we offer is a way to turn that fluency into a skill set, a portfolio, and — if you stay with it — a career.

C-YAC is not a club

It’s a working council. You’ll teach. You’ll run workshops. You’ll host parent nights and stand in front of the parents of your school and explain — better than we ever could — what is actually on the platforms their kids use.

Privacy

Mon, 01 Jan 0001 00:00:00 +0000

Short answer: no tracking around here.

C-YAC is a youth cybersecurity programme. It would be a poor fit for our brief to track you.

What we do, plainly

Cloudflare-only analytics, cookieless, no profile. We use Cloudflare Web Analytics. It loads a small JavaScript beacon from cloudflareinsights.com to record pageviews and page-load timing. It sets no cookies, doesn’t fingerprint, doesn’t build a cross-site profile, and doesn’t share data with advertising networks. Your IP is truncated by Cloudflare before it’s stored.
No advertising trackers. No Facebook Pixel. No Google Analytics. No retargeting beacons. No conversion-pixel network.
No cookies set by us. A small set of Cloudflare-managed cookies may exist on the connection layer for performance and bot mitigation; those are not used to profile you.
No newsletter sign-up without your explicit action. If you submit the contact form, it goes straight into our own collector (no third-party forms provider). It is used solely to respond to your enquiry.
No selling, no sharing, no surprise integrations. Your contact info is for our team and the volunteer specialists you’re matched with — nothing else.

What we use, when we use it

Cloudflare — hosts the site and provides server-side analytics. Their privacy posture is on their site.
Our own form collector — the contact form at /contact/ posts to an endpoint we run on Cloudflare. Your submission goes into a database we own. No third-party forms provider sees it.
No font requests at all. We name Roboto and Roboto Slab in our CSS, but we don’t load font files from anywhere — not from Google, not even from our own server. If you have those fonts installed (most Android/ChromeOS users do), your browser uses them; otherwise it falls back to your operating system’s default sans-serif. Either way, your IP doesn’t go anywhere for type.
Email-address obfuscation. Cloudflare auto-injects a small script (email-decode.min.js) that obfuscates the hello@cyberyac.com link in our HTML so scrapers can’t harvest it. The script runs only to re-render the address for you to click. It doesn’t track and doesn’t talk to anyone outside Cloudflare.

How long we keep your submission

Contact-form submissions are hard-deleted from our database once they’re more than a year old. If you’d like us to delete yours sooner, write to us at the email below and we’ll remove it the same day.