Privacy Policy.

01. What we collect

When you apply for membership, contact us, or submit a partnership inquiry, we collect the information you explicitly provide (name, 42 intra username, email address, campus level, and message). For partners, we also collect organization name and partnership type.

02. How we use your data

Your information is used strictly to support club operations and communications:

• To review and verify 42 Berlin student status for membership applications.
• To create and securely manage your member authentication account.
• To respond to inbound inquiries, project proposals, and corporate partnerships.
• To deliver workshop updates, slide releases, and quiz score tracking.

03. Where your data is stored

Your data is stored in an encrypted SQLite database on the club's dedicated self-hosted server in Germany. Access is strictly restricted to authenticated club administrators via SSH and role-based permissions.

04. Data visibility & privacy

Only verified club administrators can view application and contact submissions. Public-facing pages and workshop directories never expose personal contact information or member credentials.

05. Authentication & cookies

When you log in to the member or admin area, we set a secure session cookie (`session`). It is marked `HttpOnly`, `SameSite=Lax`, and `Secure` to safeguard your session, expiring automatically upon logout or after inactivity.

06. Third-party services

We do not sell, rent, or monetize your personal data. External web assets (such as privacy-preserving fonts loaded from Fontshare) adhere strictly to European GDPR privacy standards.

07. Your rights (GDPR)

Under GDPR, you hold full rights to access, rectify, or request the deletion of your personal data at any time. You can also reset your credentials directly via the member portal.

08. Contact the team

If you have any questions regarding this policy or wish to request data erasure, reach out directly to the club team at contact@42berlinaiclub.de.