ClusterHack privacy & data

the operator of ClusterHack decides how and why your personal information is handled on the platform itself, and is the controller

Username, email, password (stored only as a salted hash — we never see it), first/last name.

Photo, date of birth, short and long bio, phone, website, LinkedIn, GitHub, Telegram, skills, city.

Plan, subscription state, payment records. Card details are handled by the payment provider — we do not store card numbers.

IP address, browser and device information, pages requested, timestamps, error logs.

Which app you connected, what permissions you granted, and a record of the calls it made.

To run the service — your account, your events, your team, your submission, judging and results.

To communicate — event notifications, judging feedback, service announcements, and replies to your questions.

To keep it safe — detect abuse, rate-limit, investigate incidents, enforce the Terms .

To bill — process paid plans and keep records we are required to keep.

To improve — understand which features are used, in aggregate.

Account and profile — while your account exists.

MCP audit logs — 180 days.

Billing records — as long as tax and accounting law requires.

Technical logs — a short rolling window for troubleshooting and security.

ClusterHack is operated from the United States and your information is processed there.

Where required we rely on the European Commission's Standard Contractual Clauses

Delete your account and we remove your personal information, except what we must keep by law

Know what we collect about you and how it is used and disclosed

Access a copy of it in a portable form

Correct inaccurate information

Delete it, subject to legal exceptions

and of targeted advertising

We do not sell your personal information