Legal and Contact

Legal, Contact, and Trust Center

This page centralizes the controller details, operating setup, processor map, and privacy entry points that keep HackCode running as a live product.

en sk uk

1. Controller details

Controller: Michaela Vavrova
Legal form: Sole trader / Slovak trade-license holder (zivnostnik, SZCO)
Place of business: Tehelna 1024/23, 920 01 Hlohovec, Slovakia
Company registration ID: 57 433 917
Trade register no.: 250-62235
Legal and privacy email: michaela@hack-code.net
Public product URL: https://hack-code.net

2. Operating setup

Hosting region: Self-managed VPS, Amsterdam, Netherlands
AI provider: Google Gemini
Blob storage: Vercel Blob
Email delivery runtime: Resend
Payments runtime: Stripe for all payment flows

3. Active processors

Processor	Role	Purpose	Region / transfer note
VDSina	processor	Infrastructure hosting for the public site, application runtime, database, backups, and host-level logs.Data: Account data, demo requests, educational progress data, audit logs, and operational metadata stored on the VPS.	Amsterdam, NetherlandsThe current deployment VPS is operated through VDSina. A specific hosting region is published only if explicitly confirmed in deployment configuration.Official page
Google Gemini	processor	AI generation for course hints, mentor sessions, and challenge autofill routes.Data: Prompt content, challenge/course context, and limited request metadata needed to produce the response.	Europe-region processingThe current deployment is configured to use Europe-region processing for Google AI workloads. Any later processor-region change must be reflected in the legal surface before rollout.Official page
Google Analytics	processor	Optional website audience and page-view measurement after analytics consent.Data: Public marketing pathname and title without query parameters, referrer origin, device/browser metadata, approximate location derived by Google, and GA4 client/session identifiers.	Google-managed analytics infrastructureGoogle may process analytics data internationally under its Google Ads Data Processing Terms and applicable transfer safeguards. The tag is blocked until analytics consent is granted.Official page
Vercel Blob	processor	Public object storage for profile avatars and banner uploads.Data: User-uploaded profile images and the public URLs generated for those assets.	Vercel-managed object storageBlob storage is active in the current environment for public asset uploads and delivery.Official page
Resend	processor	Transactional email delivery for auth, demo, and privacy emails.Data: Recipient email address, sender address, message subject, and message body for invite/demo/privacy emails.	Resend-managed infrastructureConfigured in the current environment for transactional email delivery.Official page
Stripe	processor	Payment processing for HackCode billing flows.Data: Email, customer identifier, subscription metadata, billing status, and payment lifecycle events.	Slovak merchant account region with Stripe-managed infrastructureThe current merchant setup is treated as Slovakia-linked for billing operations. Stripe may still process data through its managed infrastructure according to Stripe terms.Official page

4. Privacy operations

Use the form below for access, correction, erasure, portability, or objection requests. Your request will be sent to our legal and privacy team for processing.

5. Account export

Signed-in users can export a JSON package containing core account data, educational profile data, privacy requests, feedback submissions, and account activity logs. Third-party moderation identities and arbitrary tenant audit payloads are excluded from the direct export.