Your data on nest

So you have data on Nest. You want to know what we do with it? Regardless if you're covered under GDPR, CCPA, POPIA, we treat everyone the same. It's the respectable thing to do.

Important notes

• If you're looking to delete the ID which you used to signup for Nest (which we do not have, as stated in Verifying your student status), please email hcb [at] hackclub [dot] com
• The domain hackclub.app belongs to Nest while hackclub.com belongs to Hack Club. While Nest is funded by Hack Club and ran by Hack Clubbers, we maintain a degree of autonomy to run as a community project.
• We also have hackclub.dn42 and nest.dn42

Access your data

Data in your home folder or identity.hackclub.app

You can access this yourself. Use an SFTP client to download the data on your end. If you cannot for some reason, E-mail us at gdpr [at] hackclub [dot] com. We'll get you your tarball usually within 1-7 days, but can be delayed if we're in school or at a hackathon. Attach a PGP key if you wish for us to encrypt it.

Data on Quetzal

Quetzal stores the following information:

model users {
  id             Int       @id @default(autoincrement())
  pk             Int?      @unique @db.Integer
  slack_user_id  String    @unique @db.VarChar(255)
  tilde_username String    @unique @db.VarChar(255)
  name           String?   @db.VarChar(255)
  email          String?   @db.VarChar(255)
  ssh_public_key String
  description    String
  is_approved    Boolean?  @default(false)
  message_id     String?
  created_at     DateTime? @default(dbgenerated("'1970-01-01 00:00:00+00'::timestamp with time zone")) @db.Timestamptz(6)
  admin          Boolean   @default(false)
  codes          codes[]
}

Contact gdpr [at] hackclub [dot] app to access it.

Data on telephony.hackclub.app or pbx.hackclub.app

E-mail david [at] hackclub [dot] com (not .app)

Data on git.hackclub.app

E-mail h [at] hackclub [dot] app

Data on a user ran service

You can usually find out who's responsible for it as it's their username.hackclub.app (e.g. h.hackclub.app). You can E-mail them at [username]@hackclub.app. If it's a custom domain, run dig [domain] CNAME or dig [domain] TXT and their username should be there. If they don't respond to their E-mail or you can't find the username, send us as much details as possible to gdpr@hackclub.app to complete your request and we'll contact them.

Data processors

• Gravatar (Automattic, Inc.) - for profile pictures (sends an md5 hash of your E-mail address)
• Hetzner (Hetzner Online GmbH) - for hosting Nest itself; for secure backups through their storage box service
• Slack (Salesforce Inc) - for communications with users; for user account management via Quetzal
• AbuseIPDB (AbuseIPDB LLC) - for reporting suspected network abuse (incl. attempted username + IP); for securing Nest from suspected bot nets

PGP keys

Use these keys if you need to encrypt things when talking with one of the admins.

dispherical/kody: https://keys.openpgp.org/pks/lookup?op=get&options=mr&search=0x13DECE56E3E7D8D8DF0871FF218E881D09E8AF46 (signing [at] k0dy [dot] xyz)

neon: http://saahild.com/creds/public.pgp