Information for California residents about CaseCrest data practices, privacy choices, and requests.
Effective date: 27 October 2026
This notice supplements the CaseCrest Privacy Policy for California residents. It describes the information used across accounts, competitions, organisation workspaces, portfolios, opportunities, resources, and communications.
The California Consumer Privacy Act, as amended by the California Privacy Rights Act, provides rights where it applies to the relevant business and processing. The rights below are subject to the law's scope and exceptions; this notice does not replace the wider Privacy Policy.
1. Information and Sources
The categories we collect depend on the features you use and the information you or an authorised organiser provide:
Identifiers and contact details, including name, email, account identifier, student ID, and profile links.
Education, professional, and eligibility details, including university or school, degree, year of study, affiliation, competition experience, and relevant demographic information where requested or provided.
Competition and organisation records, including registrations, invitations, team membership, availability, submissions and file metadata, messages, judging feedback, results, and certificates.
Content you save or publish, including portfolio entries, achievements, tracked roles and notes, listings, resources, images, and documents.
Communications and preferences, including enquiries, support requests, consent records, and email delivery or engagement information.
Technical and activity information, including IP address, browser and device details, approximate location, referral information, interactions, analytics, and security or error logs.
Where high-school consent flows apply, school and birth-year information and guardian contact, relationship, signature, and consent records.
Sources include you, your use of the website, teammates, organisers, judges, organisation administrators, sign-in providers, and the service providers supporting those activities. Some information, such as account access credentials or information you choose to include in a private message, may receive additional protection under California law.
2. Why We Use Information
Provide accounts, eligibility checks, team formation, competition administration, submissions, judging, results, certificates, and organisation tools.
Support portfolios, role discovery and tracking, resources, and other features you choose to use.
Send service messages, respond to requests, and manage marketing separately in line with preferences and applicable consent requirements.
Measure use and performance, prepare participation reports, improve the service, protect security, investigate misuse, resolve disputes, and meet legal obligations.
3. Recipients and Visibility
Teammates, organisers, judges, authorised organisation members, and CaseCrest administrators receive information needed for their roles. Authorised institutional reports can contain identifiable participant information, including relevant student and participation details; they are distinct from aggregate website analytics.
Published listings, resources, organisation profiles, results, and public portfolios are visible according to their publication and access settings. Making a portfolio public does not itself publish uploaded submission files. Recipients may retain exported information, and changing visibility cannot retrieve copies already made.
Service providers support authentication, storage, hosting, email, analytics, and security. The Privacy Policy identifies those providers, including Supabase, Vercel, Mailgun, Resend, PostHog, and Google Analytics, and explains overseas processing. We may also disclose information when required by law or reasonably necessary to address misuse, disputes, or safety concerns.
External application, registration, meeting, and resource sites have their own privacy practices. Organisers and institutions are responsible for their separate handling of information they receive.
4. California Privacy Rights
Where the CCPA applies, you can make requests to:
Learn what personal information is held about you, where it came from, why it is used, and the recipients to whom it is disclosed, including access to the information itself.
Have eligible personal information deleted, subject to exceptions.
Have inaccurate personal information corrected.
Decline a sale of personal information or its sharing for advertising across different businesses, where applicable.
Restrict uses or disclosures of sensitive personal information that fall within the law's limitation right.
Exercise these rights without unlawful discrimination.
5. Requests and Authorised Agents
Email support@casecrest.org with “California privacy request” in the subject, the email associated with your account if you have one, and what you would like us to do. An account is not required to contact us. Do not send your password, verification codes, or unnecessary identity documents.
For requests requiring verification, we may ask for information reasonably needed to confirm your identity or authority. An authorised agent can contact us for you; we may request proof of permission and, where permitted, confirmation directly from you.
We will assess the request under the law that applies, explain any applicable exception or verification issue, and respond within the required timeframe. Contact us if you need help submitting a request or wish to raise a concern about the response.
6. Analytics and Marketing Choices
CaseCrest does not sell personal information for money. California's definitions of sale and sharing can also cover some non-monetary transfers and advertising arrangements; a disclosure to a provider is not described as exempt simply because no payment is received.
The Privacy Policy explains website analytics, cookies, browser storage, session recording, and email measurement. Browser settings can restrict some cookies or storage, which may affect sign-in and other features. Contact support@casecrest.org about a privacy choice or request concerning a particular use of your information.
Manage marketing subscriptions in your profile or through email preference links. Manage email tracking choices in the email preference centre. Unsubscribing from marketing does not disable website analytics or necessary account, security, and competition messages.
7. Retention and Updates
Retention depends on the information and its purpose, including providing services, preserving competition records, resolving disputes, supporting security, and meeting legal obligations. We take reasonable steps to delete or de-identify information when it is no longer needed.
A deletion request may be subject to applicable exceptions. Backups follow their retention process, and limited suppression records may be kept to honour an unsubscribe. The Privacy Policy and Security Policy explain these practices in more detail.
We may update this notice as our practices change. The effective date identifies the version shown; additional notice or consent will be provided where required.
California privacy questions or requests?
Email support@casecrest.org with “California privacy request” in the subject and describe the information or choice you want help with.
