HotHack Privacy Policy
This policy explains how Lachlan Events Pty Ltd ("HotHack", "we") handles personal information collected through hothack.co and its subdomains: the event sites (such as 26.hothack.co), the registration site eoi.hothack.co, the participant portal my.hothack.co and certificates.hothack.co. Last updated October 2026.
1. What we collect
- When you register interest: your first and last name, email address, the role you're applying for, and optionally your LinkedIn profile and resume.
- If you take part in an event: your team, project details and any prizes; and, where we ask for them for the event itself, dietary requirements and an emergency contact.
- Mentors' written feedback about participants. This is for organisers only and is never published or shared with recruiters.
- If you use the participant portal: your account email, a password (stored by our authentication provider, not by us), and anything you add to your profile, such as a bio, GitHub or portfolio link, whether you're looking for work, and whether recruiters may see your anonymised profile.
- Basic, cookie-free usage statistics about pages visited.
2. Why we collect it
- To run HotHack: assess registrations, form teams, contact you about the event, and issue certificates.
- To email you about HotHack, such as when applications open. Every email includes a way to unsubscribe.
- To run the participant portal, including, only if you opt in, showing an anonymised version of your profile to recruiters. Your name and contact details are only shared with a recruiter if you both agree to connect.
- To keep the sites secure, for example by limiting repeated sign-in attempts.
3. What is public
Event sites and certificates show participants' names, teams, projects and prizes, and mentors' names, photos, roles and profile links. Certificates are shareable by link but are kept out of search engines. Contact details, resumes, dietary needs, emergency contacts and mentor feedback are never published.
4. Who we share it with
We don't sell personal information. We use these service providers to run HotHack, and they process data on our behalf:
- Supabase (Sydney, Australia): stores contact details, resumes, portal accounts and other private information.
- Sanity (cloud content platform): stores the public event content listed in section 3.
- Netlify (United States): hosts the websites.
- HubSpot (United States): our email list, holding your name and email so we can tell you about HotHack.
- Resend (United States): sends portal invitation emails.
- Plausible Analytics (European Union): cookie-free page statistics, with no personal information.
Recruiters only see a participant's anonymised profile if that participant has opted in, and only receive contact details after the participant accepts a connection.
5. Information stored outside Australia
Some of the providers above store or process information in the United States and the European Union. We choose providers that protect personal information to a high standard, and we remain responsible for how your information is handled under the Australian Privacy Principles.
6. How long we keep it
We keep registration and participation records so we can recognise returning participants and reissue certificates. You can ask us to delete your information at any time, and we'll do so unless we need to keep something by law.
7. Your choices and rights
- You can unsubscribe from HotHack emails using the link in any email.
- Portal users can turn recruiter visibility on or off at any time from their profile.
- Under Australian Privacy Principles 12 and 13 you can ask to see or correct the information we hold about you, or ask us to delete it, by contacting us below.
- If you're in the European Union, the GDPR may give you additional rights.
8. Complaints and contact
For any privacy question, request or complaint, email privacy@hothack.co. Complaints are handled by Lachlan Young. If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.