Privacy Policy

1. Introduction

WeekHack ("we", "us", or "our") operates the website weekhack.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree with the terms of this policy, please do not access the Service.

2. Information We Collect

2.1 Information You Provide Directly

• Account information: When you create an account, we collect your email address and password. If you sign up via Google or GitHub, we receive your name, email address, and profile picture from the respective provider.
• Profile information: Display name, bio, Twitter handle, website URL, and avatar.
• Product submissions: Product name, tagline, description, logo, screenshots, website URL, category, maker name, promotional codes, and any other details you include in your submission.
• Community content: Comments, discussion posts, and replies you create on the platform.
• Payment information: When you purchase a premium launch, add-on, or sponsorship, payment details are collected and processed directly by Stripe. We do not store your full credit card number.
• Newsletter subscription: Your email address when you subscribe to our newsletter.
• Communications: Any information you provide when contacting us via email.

2.2 Information Collected Automatically

• Usage data: Pages visited, features used, voting activity, and interaction patterns.
• Device information: Browser type, operating system, and device identifiers.
• Log data: IP address, access times, and referring URLs.
• Cookies: We use essential cookies to manage authentication sessions and remember your preferences (such as light/dark theme). See Section 7 for details.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Display your public maker profile and submitted products
• Process votes, comments, and community interactions
• Process payments for premium launches, add-ons, and sponsorships
• Send transactional emails (account verification, order confirmations)
• Send our newsletter (only if you opted in)
• Determine weekly product winners and award badges
• Moderate content and prevent abuse
• Improve and maintain the Service
• Respond to your inquiries and support requests
• Comply with legal obligations

4. How We Share Your Information

We do not sell your personal information. We may share information in the following circumstances:

• Public profile & products: Your display name, avatar, bio, submitted products, and community posts are publicly visible on the platform.
• Service providers: We share data with third-party providers that help us operate the Service (see Section 5).
• Legal requirements: We may disclose information if required by law, subpoena, or legal process, or to protect our rights, safety, or property.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Third-Party Services

We use the following third-party services to operate the platform:

• Supabase — Database hosting, authentication, and user management. Your account data and content are stored on Supabase's infrastructure. Supabase Privacy Policy
• Google OAuth — If you sign in with Google, Google shares your name, email, and profile picture with us. Google's use of your data is governed by Google's Privacy Policy.
• GitHub OAuth — If you sign in with GitHub, GitHub shares your username, email, and avatar with us. GitHub Privacy Statement
• Stripe — Payment processing. Stripe collects and processes your payment information directly. We receive only transaction identifiers and payment status. Stripe Privacy Policy
• Resend — Email delivery for transactional emails and newsletters. Your email address is shared with Resend to deliver emails. Resend Privacy Policy
• Cloudflare R2 — File storage for product logos and screenshots. Cloudflare Privacy Policy
• Vercel — Website hosting and deployment. Vercel Privacy Policy

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or legitimate business purposes (e.g., resolving disputes, enforcing agreements).

Publicly posted content (product submissions, comments, and discussions) may remain visible even after account deletion, but will be disassociated from your personal identity.

7. Cookies

We use the following types of cookies:

• Essential cookies: Required for authentication and session management. Without these, you cannot log in.
• Preference cookies: Used to remember your theme preference (light or dark mode).

We do not use advertising or third-party tracking cookies. You can configure your browser to block cookies, but this may prevent you from using certain features of the Service.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encrypted data transmission via HTTPS/TLS
• Passwords hashed using industry-standard algorithms
• API keys stored as one-way SHA-256 hashes
• OAuth tokens managed securely through Supabase Auth
• Row-level security policies on database tables to ensure users can only access their own data

While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your personal data
• Export your data in a portable format
• Withdraw consent for data processing based on consent
• Object to processing of your data
• Unsubscribe from our newsletter at any time using the unsubscribe link in any email

To exercise any of these rights, contact us at hello@weekhack.com. We will respond to your request within 30 days.

10. Children's Privacy

The Service is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete that information promptly.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. Our service providers operate globally, and by using the Service, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: hello@weekhack.com