Privacy Policy

Effective January 2027 edition

Your privacy is important to us. It is CUSEC’s policy to respect your privacy regarding any information we may collect from you across our website, https://2027.cusec.net, and other sites we own and operate.

We only ask for personal information when we truly need it to provide a service to you. We collect it by fair and lawful means, with your knowledge and consent. We also let you know why we’re collecting it and how it will be used.

What we collect

Your account

Signing in creates an account through Auth0, our authentication provider. We receive your email address and display name, and - if you sign in with Google or GitHub - whatever that provider shares with us. We never see your password.

Your ticket

Tickets are sold through Ticket Tailor. Their checkout collects your name, email, student email, university, expected graduation and degree, and payment is handled by Stripe - we never see or store your card details. We store the order’s email address so we can link the ticket to your account, and the name of the ticket you bought.

The delegate survey

After creating an account you are asked a short set of questions that Ticket Tailor does not already cover: your pronouns, t-shirt size, dietary restrictions, field of study or job, whether your school has a head delegate, how you heard about CUSEC, which events you are excited for, how you are travelling to the conference, and optional free-text answers and links (resume, GitHub, LinkedIn). This is used to run the conference - catering, swag, scheduling, and telling you about travel discounts - and is not published.

The scavenger hunt

If you take part, we store the items you have claimed, your points, purchases from the points shop, challenge submissions, any team you join, and your Discord handle if you provide one. Your display name and score appear on a leaderboard visible to other signed-in delegates.

How we use it

  • To sell you a ticket and get you into the conference.
  • To plan the event - food, sizes, accessibility, room capacity, and sharing travel discounts with the delegates they apply to.
  • To run the scavenger hunt and its leaderboard.
  • To email you about the conference you registered for.

What we share

We don’t share any personally identifying information publicly or with third parties, except when required by law. We do rely on service providers to operate the conference - Auth0 for sign-in, Ticket Tailor and Stripe for ticketing and payment, MongoDB Atlas and Vercel for hosting - and your data passes through them for those purposes only.

Sponsors do not receive your information unless you choose to share it with them, for example by handing over a resume at the conference.

Our website may link to external sites that are not operated by us. Please be aware that we have no control over the content and practices of these sites, and cannot accept responsibility or liability for their respective privacy policies.

How long we keep it

We only retain collected information for as long as necessary to provide you with your requested service. What data we store, we’ll protect within commercially acceptable means to prevent loss and theft, as well as unauthorized access, disclosure, copying, use, or modification.

Your choices

You are free to refuse our request for your personal information, with the understanding that we may be unable to provide you with some of your desired services. You can ask us to show you what we hold about you, correct it, or delete it, by emailing info@cusec.net. Your continued use of our website will be regarded as acceptance of our practices around privacy and personal information.

Contact

Questions about how we handle user data and personal information: info@cusec.net.