Privacy Policy
International CodeFest '26 ("ICF '26", "we", "us", or "our") is organised by Google Developer Groups on Campus IBA (GDGoC IBA). This Privacy Policy explains what personal information we collect from participants, how we use and store it, with whom we share it, and what rights you have over your data.
By registering for International CodeFest '26 and accepting the Terms & Conditions during registration, you acknowledge that you have read and understood this Privacy Policy.
Information We Collect
When you register for ICF '26, we collect the following categories of personal data:
- Identity information: Full name, gender, date of birth, nationality, and a government-issued identity document (CNIC, passport, or equivalent).
- Contact information: Email address and phone number.
- Academic & professional information: University / institution name, year of study, degree programme, and your curriculum vitae (CV/resume).
- Team information: Team name and details of up to three (3) team members, including their individual identity and academic information listed above.
- Payment information: A screenshot of your payment transaction confirming registration fee payment. We do not collect or store any bank account numbers, card numbers, or payment credentials.
- Location information: Country, state/province, and city of residence.
- Technical data: Basic usage data collected by our hosting infrastructure (Google Cloud Run & Supabase) as part of normal server operation — e.g., IP address and browser type — used solely for security and uptime monitoring.
How We Use Your Information
We use your personal data for the following purposes:
- Registration & identity verification: To confirm your eligibility, verify your identity, and create your competition account.
- Event administration: To manage team formation, communicate competition details, send your portal magic-link, and issue digital certificates of participation.
- Payment verification: To confirm receipt of registration fees.
- Competition operations: To set up the online judging platform (DOMJudge), generate real-time leaderboards, and announce results.
- Talent matching (opt-in via registration): To share CVs of qualifying participants with sponsors and hiring partners. See Section 3 for full details.
- Post-event reporting: To compile aggregate, anonymised statistics about participation (e.g., total teams, countries represented) that are shared with sponsors and published publicly.
- Future GDGoC IBA events: With your consent at registration, we may contact you about future events organised by GDGoC IBA. You may opt out at any time.
We do not sell your personal data to any third party, and we do not use your data for advertising or marketing purposes unrelated to ICF '26 or GDGoC IBA events.
Sharing of CV & Resume Data with Third Parties
International CodeFest '26 is a talent-discovery event. Part of our value proposition to sponsors and industry partners is facilitating direct connections between top-performing participants and hiring organisations.
Important disclosure: By registering for ICF '26, you consent to your CV and resume being shared with our official sponsors, collaborators, and partner tech companies if your team qualifies within the top-ranking tiers of the competition, as defined per sponsorship package terms. The specific tiers are: all teams (Title Sponsor), Top 50 teams (Co-Title Sponsor), and as otherwise agreed with individual partners.
The following categories of third parties may receive your CV:
- Title & Co-Title Sponsors: Companies holding the highest-tier sponsorship packages receive ranked CVs as part of their talent acquisition benefits.
- Gold, Silver, and Bronze Sponsors: These partners do not automatically receive CV data. Sharing with these tiers requires separate explicit consent.
- Official Collaborating Universities: Partner universities (e.g., Air University, CUI, Habib University, MAJU, IMSciences Peshawar) may receive anonymised performance data for academic reporting. Individual CVs are not shared with collaborating universities without explicit consent.
- GDGoC IBA Core Team: Only authorised organisers with a need-to-know access CV data for verification and administrative purposes.
Third-party recipients are required to use your CV data solely for recruitment and talent-scouting purposes related to ICF '26. They are not permitted to redistribute, resell, or use your data for unrelated purposes.
If you do not wish your CV to be shared with sponsors upon qualifying, please contact us at info@internationalcodefest.com before the competition begins. Note that this may affect certain sponsor-offered benefits (e.g., fast-track interview offers).
Data Storage & Security
Your data is stored and processed using the following infrastructure:
- Database: Participant registration data is stored in a Supabase PostgreSQL database hosted on secure cloud infrastructure.
- File uploads (CVs, identity documents, payment screenshots): Uploaded files are stored in Google Cloud Storage (GCS), a secure, encrypted object storage service operated by Google. Files are not publicly accessible by default; access is restricted to authorised GDGoC IBA organisers.
- Application hosting: The ICF '26 website and portal run on Google Cloud Run, which provides encrypted HTTPS connections for all data in transit.
We implement reasonable technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. However, no internet transmission is 100% secure, and we cannot guarantee absolute security.
Data Retention
We retain your personal data for the following periods:
- Registration & competition data (name, email, team info, results): Retained for up to 2 years after the competition date for record-keeping, certificate re-issuance, and future event planning.
- Uploaded files (CVs, identity documents, payment screenshots): Retained for up to 1 year after the competition, after which they are permanently deleted from Google Cloud Storage.
- Payment screenshots: Retained for up to 1 year for financial record-keeping purposes.
You may request earlier deletion of your data at any time. See Section 7 for how to exercise this right.
Email Communications
By registering, you will receive the following emails from us:
- Transactional emails (mandatory): Registration confirmation, portal access magic-links, payment verification updates, competition schedule reminders, and result announcements. You cannot opt out of these while registered.
- Promotional emails (optional): Updates about future GDGoC IBA events, workshops, and opportunities. You may opt out of these at any time by contacting us at info@internationalcodefest.com.
- Sponsor communications (conditional): If you qualify for a tier where CVs are shared, the relevant sponsor may reach out directly to you using the contact information you provided in your registration.
Your Rights
You have the following rights regarding your personal data:
- Right of access: You may request a copy of the personal data we hold about you.
- Right to rectification: You may request correction of inaccurate or incomplete data. Minor corrections can be requested via the participant portal.
- Right to erasure: You may request deletion of your personal data. Please note that withdrawing your registration does not automatically delete uploaded files — you must submit a separate deletion request.
- Right to withdraw consent: You may withdraw consent for CV sharing (see Section 3) or promotional emails at any time. This does not affect the lawfulness of processing based on consent before withdrawal.
- Right to data portability: You may request a copy of your data in a structured, machine-readable format.
To exercise any of these rights, email us at info@internationalcodefest.com with the subject line "Data Request – [Your Full Name]". We will respond within 14 business days.
Children's Privacy
ICF '26 is open to high school students and above. Participants under the age of 18 should obtain parental or guardian consent before registering. If we become aware that we have collected personal data from a child under 13 without appropriate consent, we will delete it promptly.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we do, we will update the "Last updated" date at the top of this page and, where appropriate, notify registered participants via email. Your continued participation in the event after changes are posted constitutes your acceptance of the revised policy.
Contact Us
For any privacy-related questions, data requests, or concerns, please reach out:
International CodeFest '26 – Privacy
Organised by GDGoC IBA, Institute of Business Administration, Karachi
info@internationalcodefest.com
We aim to respond to all requests within 14 business days.