Legal and Contact
Legal, Contact, and Trust Surface
This page centralizes the controller details, operating setup, processor map, and privacy operations entrypoints that support HackCode as a real operating product.
1. Controller details
Controller: Michaela Vavrova
Legal form: Sole trader / Slovak trade-license holder (zivnostnik, SZCO)
Place of business: Tehelna 1024/23, 920 01 Hlohovec, Slovakia
IČO: 57 433 917
Trade register no.: 250-62235
Legal and privacy email: hackcode.eu@gmail.com
Public product URL: https://hack-code.net
2. Operating reality
Hosting: Self-managed Ubuntu VPS via VDSina. Exact VPS region is not publicly asserted in the current legal surface. via VDSina
Database: PostgreSQL on the same self-managed VPS via Prisma ORM
Backups: Operator-managed backups on the same VPS environment
Logs: Application logs on the VPS host plus API/product telemetry tables in PostgreSQL
AI provider: Google Gemini
Blob storage: Vercel Blob
Email delivery runtime: Mailtrap (primary), Google Gmail SMTP (fallback)
3. Active processors
| Processor | Role | Purpose | Region / transfer note |
|---|---|---|---|
| VDSina | processor | Infrastructure hosting for the public site, application runtime, database, backups, and host-level logs. Data: Account data, demo requests, educational progress data, audit logs, and operational metadata stored on the VPS. | Exact VPS region is not publicly asserted in the current legal surface. The current deployment VPS is operated through VDSina. A specific hosting region is published only if explicitly confirmed in deployment configuration. Official page |
| Google Gemini | processor | AI generation for course hints and challenge autofill routes. Data: Prompt content, challenge/course context, and limited request metadata needed to produce the response. | Google-controlled infrastructure International transfers depend on Google processing locations and must be reviewed against the live Google terms used by the deployment. Official page |
| Vercel Blob | processor | Public object storage for profile avatars and banner uploads. Data: User-uploaded profile images and the public URLs generated for those assets. | Vercel-managed object storage Blob storage is active in the current environment for public asset uploads and delivery. Official page |
| Mailtrap | processor | Transactional email delivery (primary) for invite, demo, and privacy emails. Data: Recipient email address, sender address, message subject, and message body for invite/demo/privacy emails. | Mailtrap-managed infrastructure Configured in the current environment for transactional email delivery. Official page |
| Google Gmail SMTP | processor | Transactional email delivery (fallback) for invite, demo, and privacy emails. Data: Recipient email address, sender address, message subject, and message body for invite/demo/privacy emails. | Google-managed email infrastructure Configured as the active SMTP relay in the current environment; message processing follows Google mail infrastructure locations. Official page |
4. Privacy operations
Use the form below for access, correction, erasure, portability, objection, or demo-contact deletion requests. The request is logged into the privacy operations queue and routed to the legal contact channel.
Use this form for access, erasure, portability, or demo-contact deletion requests. We verify identity before acting on sensitive requests.
5. Account export
Signed-in users can export a JSON package containing core account data, educational profile data, preview access logs, privacy requests, feedback submissions, demo requests tied to the account email, and recent audit or product events tied to the account.
Sign in first if you want a direct account export. Otherwise use the privacy request form above.
6. Slovak summary
Tu najdes kontakt na privacy/legal poziadavky, technicku realitu hostingu a zoznam aktivnych processorov.
Formular nizsie sluzi na access, opravu, vymazanie, portability alebo zmazanie demo kontaktu.
Prihlaseny pouzivatel moze priamo exportovat svoje account data vo formate JSON.
