Who is responsible
ShipOrCry is operated by Avalore Ltd, which is the data controller responsible for the personal information described in this notice. For privacy enquiries, contact hello@shiporcry.com. Avalore Ltd’s service address still needs to be published here.
Information used by the service
Account information includes email, authentication records and profile details you supply. Project information includes your declaration, tags, eligibility status and update history. Supplier enquiries include the company and contact information supplied in the form.
The service also needs security and operational records such as request timestamps, authentication events and administrator audit logs. Referral attribution may record a referrer and verified signup. Financial verification may involve additional evidence only after a secure process and its notice are confirmed.
Why it is used
The intended purposes are account access, event administration, accountability deadlines, community discovery, perk matching, support enquiries, security and handling disputes. The organiser must identify and document the lawful basis for each purpose and explain any required data before collecting it. Optional publicity or marketing needs a separate, appropriate choice.
Who can see what
Entering a project publishes its name, description, category, platforms, website and X handle on the public builders wall. Registered participants can also discover its technology stack, challenges and offered skills. You see this before locking your entry. Progress updates are visible only to registered participants and authorised administrators. Email addresses are not published.
Restricted perk codes, private financial evidence, personal contact details and administrative records are not public. Participant information is not automatically shared with sponsors. Your repository is not made available to other participants through MCP.
Providers and international processing
The intended providers are Supabase for authentication and data, Vercel for hosting and Resend for transactional email. The Supabase database project is configured in an EU region. Other provider regions, processor contracts, subprocessor lists, international transfer mechanisms and any analytics must still be confirmed for the deployed service.
Discord is optional and governed by its own terms and privacy information. Following an external project link takes you to another service.
Cookies and agent access
Authentication requires session storage or cookies. Any non-essential analytics or tracking must be disclosed and use consent where required before activation.
Connecting a coding app uses browser sign-in and your approval. We store the app name and account permission grant so the connection can renew and you can disconnect it in Settings. The app can use the published participant tools with your authority; administrator and financial-record access are excluded. Do not put credentials into prompts or publish them. The agent skill itself is instructional and does not grant repository access.
Retention and deletion
The organiser must publish retention periods or clear criteria for account, declaration, update, enquiry, financial and audit records. No final period has been approved. A deletion request may need to be balanced against an explained legal obligation or a legitimate event dispute record; records must not be kept indefinitely by default.
Contact hello@shiporcry.com for account deletion, data access, correction or export requests. We may need to verify your identity. Project listing is part of entering the competition; contact us if you need to withdraw your entry or discuss removal. Copies already shared or cached outside ShipOrCry may not be retrievable.
Your rights and complaints
Depending on the applicable law and processing basis, rights may include access, correction, deletion, restriction, portability, objection and withdrawal of consent. Contact hello@shiporcry.com with a privacy request. A verified request and response procedure still needs to be finalised. People in the UK may complain to the Information Commissioner’s Office at ico.org.uk.
The outstanding service address, purposes and lawful bases, retention, transfers, age handling and request process are launch-completion items. Read the linked operational review before treating this draft as a final notice.