Loading CaseCrest…
Preparing this page for you.
CaseCrest legal
How CaseCrest handles personal information across competitions, teams, portfolios, opportunities, and communications.
Effective date: 16 September 2026
This policy explains how CaseCrest collects, holds, uses, and shares personal information about visitors, account holders, participants, judges, organisers, and other people who interact with our services.
It covers the CaseCrest website, competition and organisation workspaces, portfolios, resources, event and career listings, and our communications. This policy explains our practices; it does not by itself obtain any consent required by applicable law.
The information we collect depends on how you use CaseCrest:
We collect information you provide in forms, uploads, messages, and preferences, and information generated when you use the platform. We may also receive relevant information from teammates, organisers, judges, organisation administrators, identity providers you use to sign in, and service providers supporting those activities.
Some information is needed to create an account, establish eligibility, form teams, or run a competition. If you do not provide required information, the relevant feature may be unavailable. You can browse many public pages without an account.
Competition features may use profile, eligibility, team, availability, and scoring information to match participants, schedule presentations, calculate rankings, or apply progression rules. Organisers configure and manage these processes. Contact the organiser about a competition decision or support@casecrest.org about incorrect platform data.
Organisers, authorised organisation members, judges, and CaseCrest administrators may access information needed for their roles, including relevant participant details, submissions, scores, and communications. Teammates can see information shared within their team. Team discussions and private questions have different audiences; check the audience shown before posting.
Competition reports may include identifiable participant information. For example, configured UNSW Sydney participation reports can provide authorised university staff with names, student IDs, faculty and degree-structure information, year of study, registration path, and outcomes for participating UNSW students. Participation from other universities is summarised in those reports. These reports are distinct from aggregate analytics.
Competition-specific notices or rules may explain additional recipients or uses. Organisers and institutions are responsible for their own handling of information they receive, including exported reports. Contact them about their separate practices.
If you choose to make your portfolio public, people with its link can see your display name and the verified competition, participation, submission-history, and achievement details shown there. Enabling a public portfolio does not itself publish your uploaded submission files. You can change portfolio visibility in your portfolio settings.
Published competition, event, role, resource, and organisation content is visible to its intended audience. Results visibility depends on the competition's publication settings. Public information may be copied or shared by others, and changing visibility cannot retrieve copies already made.
External registration, application, meeting, and resource links take you to services operated by others. Their privacy policies apply to information you give them.
We use service providers to operate the platform. These include Supabase for authentication, databases, and storage; Vercel for hosting and performance services; Mailgun for transactional email; Resend for marketing email; and PostHog and Google Analytics for usage analysis. Information is processed by the providers relevant to the features you use.
Our providers and competition recipients may process information outside your country, including in the United States. Locations depend on the provider, service configuration, and recipient. Contact support@casecrest.org for information about the providers and processing locations relevant to your request.
We may also disclose information where required by law or reasonably necessary to investigate misuse, resolve disputes, or protect the rights and safety of users and the platform.
CaseCrest uses cookies and browser storage for functions such as sign-in, session security, preferences, and analytics. Google Analytics, PostHog, Vercel Analytics, and Vercel Speed Insights help us understand traffic, interactions, errors, and site performance. Analytics can include page views, clicks, form interactions, device information, and referral information; some activity is linked to your account identifier when you are signed in.
PostHog may also collect heatmaps and session recordings that reconstruct interactions with pages. Our configuration masks form inputs, masks or blocks designated sensitive elements, and filters sensitive links and parameters. These protections do not mean every visible piece of page content is excluded from recordings.
You can use browser settings to restrict cookies or storage, although this may affect sign-in and other functions. Marketing email preferences are separate from website analytics settings; unsubscribing from marketing does not disable website analytics.
Account, security, team, and competition messages support the services you use. Marketing messages, such as platform updates and opportunities, are managed separately and sent subject to your preferences and applicable consent requirements. Partner or sponsored opportunities may have separate subscription choices.
Signup email updates cover competitions and opportunities, resources and newsletters, internships and careers, and CaseCrest product and community updates. Partner and sponsored opportunities are excluded unless you enable them separately.
You can change your marketing preference in your profile, use the preference or unsubscribe link in a marketing email, or contact support@casecrest.org. Unsubscribing from marketing does not stop necessary account, security, or competition messages.
Where enabled for a campaign and permitted by your tracking preference, marketing emails may use tracking pixels and measured links to record opens, clicks, approximate location, device or email-client categories, and subsequent activity on CaseCrest. Tracked links may set an attribution cookie. Email tracking choices are available in the email preference centre.
Delivery, bounce, complaint, consent, and unsubscribe records may still be processed when engagement tracking is off, so we can operate email services and honour your choices.
We prepare aggregate statistics and de-identified reports about participation, outcomes, usage, and performance. We may use and share these for service improvement, institutional reporting, research, and benchmarking where people are not reasonably identifiable.
Information does not become anonymous simply because names are removed. Account-linked analytics, individual scores, and identifiable participation reports remain personal information and are handled under the other sections of this policy.
Our Terms of Service and competition rules set eligibility requirements. High-school account and registration flows may require a parent or legal guardian to complete consent steps.
For those flows, we may collect school and birth-year information, the guardian's name, email, phone number, relationship to the student, typed signature, and consent records such as the date, IP address, and version of the terms accepted. We use these records to administer eligibility and consent and handle related enquiries.
A student or guardian can contact support@casecrest.org with questions about these records or to request access, correction, or deletion, subject to applicable requirements.
We retain information for as long as reasonably needed for the purposes described here, including providing services, maintaining competition records, resolving disputes, supporting security, and meeting legal obligations. The period depends on the type of information and why it is held.
Deletion requests may be subject to legal or operational retention needs, and backup copies may remain until replaced or removed through the relevant retention process. Limited suppression records may be needed to continue honouring an unsubscribe. Where information is no longer needed, we take reasonable steps to delete or de-identify it.
We use safeguards described in our Security Policy. No system can guarantee absolute security, and authorised recipients may retain information they have already received.
You can update available profile fields and preferences in your account. For access to your information, corrections you cannot make yourself, account closure or deletion requests, or a privacy complaint, email support@casecrest.org and explain your request.
We may ask for information reasonably needed to verify your identity or authority. Do not send passwords or unnecessary identity documents. We will assess the request, explain any applicable limitations, and respond in accordance with the law that applies to it.
If you make a complaint, we will review the issue, seek relevant details where needed, and respond with the outcome or next steps. If it remains unresolved, you may be able to complain to the Office of the Australian Information Commissioner at oaic.gov.au or the privacy regulator in your jurisdiction, where they have authority to consider the matter.
We may update this policy as the platform or our practices change. The effective date identifies the version shown. For material changes, we will provide additional notice or seek consent where required by applicable law.
Email support@casecrest.org with your request and the email address associated with your account.
support@casecrest.org