Your privacy is important to us. It is CUSEC’s policy to respect your privacy regarding any information we may collect from you across our website, https://2027.cusec.net, and other sites we own and operate.
We only ask for personal information when we truly need it to provide a service to you. We collect it by fair and lawful means, with your knowledge and consent. We also let you know why we’re collecting it and how it will be used.
What we collect
Your account
Signing in creates an account through Auth0, our authentication provider. We receive your email address and display name, and - if you sign in with Google or GitHub - whatever that provider shares with us. We never see your password.
Your ticket
Tickets are sold through Ticket Tailor. Their checkout collects your name, email, student email, university, expected graduation and degree, and payment is handled by Stripe - we never see or store your card details. We store the order’s email address so we can link the ticket to your account, and the name of the ticket you bought.
Event signups
If you leave your email at a CUSEC meetup, we store your email, optional name, the meetup link you used, and when you opted in. We use this to send the CUSEC 2027 invite, sign-up details, and related event updates. Each email includes a way to unsubscribe.
The delegate survey
After creating an account you are asked a short set of questions that Ticket Tailor does not already cover: your pronouns, t-shirt size, dietary restrictions, field of study or job, whether your school has a head delegate, how you heard about CUSEC, which events you are excited for, how you are travelling to the conference, and optional free-text answers and links (resume, GitHub, LinkedIn). This is used to run the conference - catering, swag, scheduling, and telling you about travel discounts - and is not published.
The scavenger hunt
If you take part, we store the items you have claimed, your points, purchases from the points shop, challenge submissions, any team you join, and your Discord handle if you provide one. Your display name and score appear on a leaderboard visible to other signed-in delegates.
How you found us
When you visit the site we note which campaign link, referring website, or search brought you here - the marketing campaign tags in the address (such as utm_source andutm_campaign), the hostname of the site that linked you to us, and the page you landed on. We never record the full address of the page that sent you, only its hostname, and no other query parameters are kept. We use this to understand which outreach brings attendees to the conference, and to connect it to your account and ticket purchase if you create one. It is stored with your account and deleted when your account is deleted; before you sign in it is kept for up to 30 days in a small cookie on your own device.
Site analytics
Beyond the campaign attribution above, we measure how the site is used through PostHog (PostHog Inc.): which pages are viewed and which buttons are clicked. Automatic data collection and session recording are disabled, and we never send PostHog your name, email address, or any survey answer - events carry only a random identifier and coarse values like which button was clicked. You can read PostHog’s privacy practices at posthog.com/privacy.
How we use it
- To sell you a ticket and get you into the conference.
- To plan the event - food, sizes, accessibility, room capacity, and sharing travel discounts with the delegates they apply to.
- To run the scavenger hunt and its leaderboard.
- To email you about the conference you registered for.
- To send meetup subscribers the invitation and updates they requested.
What we share
We don’t share any personally identifying information publicly or with third parties, except when required by law. We do rely on service providers to operate the conference - Auth0 for sign-in, Ticket Tailor and Stripe for ticketing and payment, MongoDB Atlas and Vercel for hosting - and your data passes through them for those purposes only.
Sponsors do not receive your information unless you choose to share it with them, for example by handing over a resume at the conference.
Our website may link to external sites that are not operated by us. Please be aware that we have no control over the content and practices of these sites, and cannot accept responsibility or liability for their respective privacy policies.
How long we keep it
We only retain collected information for as long as necessary to provide you with your requested service. What data we store, we’ll protect within commercially acceptable means to prevent loss and theft, as well as unauthorized access, disclosure, copying, use, or modification.
Your choices
You are free to refuse our request for your personal information, with the understanding that we may be unable to provide you with some of your desired services. You can ask us to show you what we hold about you, correct it, or delete it, by emailing info@cusec.net. Your continued use of our website will be regarded as acceptance of our practices around privacy and personal information.
Contact
Questions about how we handle user data and personal information: info@cusec.net.