Privacy policy

Information we collect

We collect information you provide to manage your account and events: your name, email, school, application answers, requested documents, and dietary information where applicable. We also keep event enrollment, SH-ID, RSVP, check-in, project, achievement, and SpartaCoin records.

We save the consent terms, version, choices, and acceptance time with your application. For travel requests, we also record when you open the linked travel policy and which version you accept. Opening the page does not prove you read it.

How we use and share it

We use this information to run events, communicate with you, and provide account features. Authorized organizers can access information according to their role and event responsibilities.

Convex provides account, database, and file infrastructure; Vercel hosts the website and provides traffic analytics; Resend processes email and mailing-list contacts. Each receives information needed for its service. External registration and community services have their own terms and privacy policies.

Organizers use aggregate reports to understand applications, registration, attendance, participation, and project outcomes. Reports do not display individual application answers or contact details. OrganizerHQ exports may be matched to existing accounts to reconcile registration and attendance; unmatched registrants are excluded from account-based reports.

MLH Privacy Policy

Cookies and browser storage

We use session cookies for sign-in and browser storage for features such as achievement discovery. Signed-out discoveries are saved when you sign in before the relevant event ends. New discoveries and unsaved claims close at event end; saved achievements and coins remain. Clearing browser storage can remove unsaved discoveries.

Activity records and retention

Application answers save automatically to your account as a draft. Drafts expire seven days after your last save and are removed through scheduled cleanup. This includes files attached to abandoned initial submissions. Submitted applications and applications returned for revision are retained. Files selected in the form upload when you submit, so you must reselect files if you leave before uploading them.

We record event actions, their time, and limited feature metadata to operate events and understand feature use. Records may identify your account when signed in or use a random per-tab identifier when signed out. Application answers and contact details are not copied into activity metadata.

Signup protection

We use Cloudflare Turnstile to help protect mailing-list signup from automated abuse. We use short-lived keyed hashes for signup rate limits rather than storing source IP addresses in subscription records.

Organizers may pause suspicious subscriptions for review. When a contact is removed from our email provider, we retain a local suppression record to prevent automatically adding it again.

Email preferences

Joining the interest list subscribes you to SpartaHack updates. Marketing and announcement emails include an unsubscribe link. Account verification, password recovery, and other service messages are separate from that subscription.

Your choices and questions

Contact us to request a correction or deletion, ask about your information, or raise a privacy concern. We review requests individually; some records may need to remain for security, audit, or event administration. Do not send passwords or sensitive documents in your initial email.

Questions? Contact hello@spartahack.com.