Privacy notice

What we collect

• Account details: email address, username, display name, and — if you add them — affiliation, bio, website, GitHub username and avatar. If you sign in with GitHub or Google we store the provider's account id.
• Competition activity: competitions you joined and when you accepted their rules, your team, submissions (files, scores, answers to submission questions), verification materials, and discussion posts and votes.
• Technical data: session records (browser user agent and IP address, to let you review and sign out sessions), API token usage times, and server logs kept for security and debugging.
• Email records: which emails we sent you and whether delivery succeeded.

Who can see what

• Everyone: your public profile (display name, username, affiliation and the other profile fields you fill in), your discussion posts, and your team's entries on leaderboards that are public.
• Hosts of competitions you join: your email address, profile, team, submissions (including the files), and when you joined and accepted the rules. Hosts can export the participant list and email participants. Hosts are researchers who may be outside our lab; they agree to use this information only to run their competition.
• Your teammates: your profile and the team's submissions.
• Our administrators: everything above, to operate and support the service.

How we use it

• To run your account and competitions: scoring, leaderboards, teams, discussion and verification.
• To email you: account emails (verification, password reset, team invitations) are always sent; announcements from hosts and discussion replies follow your notification settings. Hosts may still contact you directly about a competition you joined.
• To keep the platform secure and fair, e.g. detecting abuse or rule-breaking.

Our legal basis is providing the service you signed up for (contract) and our legitimate interest in running fair, secure research competitions.

Where it lives

Data is stored with our hosting and storage providers, and transactional email is delivered via an email provider. Code submissions run on a sandboxed compute provider. These providers process data on our behalf only.

How long we keep it

We keep competition records (submissions, scores, standings) for as long as the competition is on the site, because results are part of the scientific record. If you delete your account, we remove your personal details; leaderboard entries may remain under your team name.

Your rights

You can see and edit most of your data in settings, leave competitions, and delete your account. You may also ask us for a copy of your data, corrections or erasure, and you can complain to a data protection authority (in the UK, the ICO).

Contact

Email [email protected] with any privacy question. HULA is run by the Parker Jones Neural Processing Lab, University of Oxford.