TECH4HACK-CGCU / PRIVACY

Privacy notice

Your membership profile is private. Published team profiles are separate.

What we collect

Membership applications include your name, email, GR number, course or branch, semester, interests, experience level and reason for joining. Skills, projects, contribution and availability are optional. We use these details to review membership, maintain your private profile and administer club activities.

Member profiles and sign-in

Approval creates a profile linked to your application. Passwordless sign-in sends a one-time link to your approved email. The website stores hashes of sign-in tokens and session identifiers, rather than a password. Links expire after 10 minutes and member sessions after up to 14 days. A short-lived browser cookie ties the link to the browser that requested it. Sign out on shared devices.

Event registrations

Built-in event registration saves your membership reference, registration status, time and the policy version you accepted, plus a snapshot of your name, email, GR number, course and semester at registration. This avoids repeated entry and helps organizers maintain an attendee list. Current profile updates do not rewrite past registration snapshots. Administrators can view and export attendee details for event administration.

Private and public data

Applications, GR numbers, member profiles and attendee lists are not public directories. The admin area requires separate authorization. Team profiles, event pages and gallery photos appear publicly only when an administrator publishes them. Those published profiles are separate from student membership accounts. Only publish material you have permission to share.

Providers and email

Cloudflare hosts the website and database. Cloudflare Turnstile helps verify form submissions and can process browser and connection information for that purpose. Google handles admin sign-in and Gmail delivery. Administrator Gmail authorization is send-only; student email-link sign-in does not request access to student inboxes. Other sites linked here have their own privacy practices.

Cookies and abuse prevention

Secure, HttpOnly cookies support administrator and member sessions and sign-in flows. Temporary hashed counters limit repeated attempts. These are used for site operation and security. The current application does not add marketing tracking or sell application data.

Storage and removal

Application and event records remain until removed by the club; automatic age-based deletion is not configured. Removing an application deletes the linked active member profile, sessions, tokens and event registrations, plus its delivery record. Minimal administrative action logs remain. Already sent emails, exported files and external-service messages are not recalled by deletion. Hosting backups may retain earlier information under provider backup settings.

Your requests

For a correction or deletion request, email tech4hackcgcuniversitymohali@gmail.com from your membership address and identify the relevant record. You can update your own name, course and semester after sign-in, and add a missing GR number once. Existing GR number corrections require an administrator. Do not send passwords or sign-in links to anyone.

Review

This notice describes the current website. Policy version: 2026-11-01. The club should review it when data practices or providers change.