Privacy notice

Account details, school and grade, application responses, emergency contact information, dietary and accessibility requirements, uploaded documents, security logs, and communication preferences.

How it is used

Information is used only for event administration, participant support, safety, fraud prevention, legal compliance, and aggregate event reporting. We do not sell personal information.

Who can access it

Access is restricted to authorized OTHacks organizers and school personnel who need the information for their assigned responsibilities. Service providers such as Supabase and the configured email provider process data on our behalf.

Retention

Unsuccessful applications and uploaded documents should be deleted within 90 days after the event. Accepted-participant operational records should be deleted within one year unless the school requires a different retention period. Security and audit records may be retained longer when needed to investigate an incident.

Your choices

You may request access, correction, or deletion by contacting privacy@othacks.ca. Some records may need to be retained for safety, legal, or incident-response reasons.

Security and incidents

We use access controls, private storage, encryption in transit, audit logs, backups, and monitoring. No system is risk-free. Confirmed incidents are handled under the OTHacks incident-response plan and applicable school and legal requirements.