Privacy Policy

Account details you give us: your name, college ID, email address, department, year and section, and a password (stored only as a secure hash — we can never see it).

Profile details you choose to add: photo, phone number, LinkedIn or GitHub link, skills and a short bio.

Club activity: session attendance (check-in time and the device's IP address, to prevent proxy check-ins), projects, team membership, forum posts, messages and achievements.

Security records: sign-in times, IP address and browser type, so coordinators can spot misuse of accounts.

Stored only in your browser: preferences (intro, sound, calm mode), learning-roadmap progress and best quiz scores. These never leave your device.

• To create and secure your account, and to verify your email with one-time codes.
• To record attendance, run teams, projects, hackathons and the leaderboard.
• To let members find teammates and message coordinators.
• To send you account emails (verification codes, password resets, welcome messages).
• To keep the platform safe — for example, investigating suspicious sign-ins.

• Other signed-in members can see your name, profile photo, department, skills and anything you add to your public profile.
• Club coordinators and faculty coordinators can see account details, attendance and sign-in records to manage the club.
• The public website shows only what the club publishes — team profiles, events, achievements and photos from club activities.

We do not sell, rent or trade personal information, and we don't use advertising or tracking cookies.

The platform is hosted on Vercel, data is stored in a managed MySQL database (Aiven), and account emails are sent through Gmail. These providers process data only to deliver their service to us.

We use a sign-in token and your browser's local storage to keep you signed in and remember your preferences. They are necessary for the platform to work. We do not use analytics or advertising cookies.

We keep your account while you are a club member. Sign-in records and one-time codes are kept only as long as needed for security. When you leave the club or ask us to, we delete or anonymise your account; club records such as event attendance totals may be kept in anonymous form.

Passwords are hashed with bcrypt, connections use HTTPS, and admin tools are limited to coordinators by role. No system is perfectly secure, so please use a strong password that you don't use anywhere else, and tell us straight away if you think your account has been misused.

• View and edit your profile at any time from Settings.
• Change your email (with verification) and password from Settings.
• Ask us for a copy of your data, or to correct or delete it, by writing to iotclub4tech@gmail.com. We aim to reply within 14 days.

We share photos from workshops and events on the website to show what the club does. If you appear in a photo and would like it removed, email us and we will take it down.

If we change this policy we will update the date at the top of this page and, for important changes, tell members by announcement.