Privacy Notice

• Account & identity: name, email, team affiliation, role.
• Submissions: project content you upload (graph JSON, summaries, URLs).
• Device & usage: IP address, user-agent, pages visited, timestamps. Only stored as one-way hashes for consent audit purposes.
• Consent records: categories you accept or reject, GPC signal, timestamp.

We do not knowingly collect precise geolocation, biometric data, or other sensitive personal information.

• Operate the hackathon platform (essential).
• Score and judge submissions (essential).
• Detect abuse and protect accounts (security / fraud).
• Aggregate, de-identified product analytics (only with your consent).
• Marketing about CriticalAsset programs (only with your consent).

• Hosting and database infrastructure (Lovable Cloud).
• Email delivery providers used for transactional notices.

We do not sell personal information for money. To the extent any analytics or marketing tools we may add in the future could constitute "sharing" for cross-context behavioral advertising under California law, you can opt out at any time using the controls described below.

If you are a California resident, you may request to:

• Know what personal information we have about you.
• Delete personal information we hold about you.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of your personal information.
• Limit the use of any sensitive personal information.

We do not discriminate against you for exercising your rights. To make a request, visit /privacy-request. We verify access, deletion, and correction requests by emailing a one-time link to the email address on the request.