Data Processing

Effective date: 2026-03-17

1. Data Controller

The data controller is the administration of the website squadhack.xyz.

2. Legal Basis for Processing

Personal data is processed on the following grounds:

• User consent upon registration and use of the Site.
• Contractual obligation (providing paid services).
• Legitimate interests of the operator (ensuring Site security).

3. Categories of Processed Data

Category	Data	Retention Period
Account	Username, email, password (hash)	Until account deletion
Technical	IP address, user-agent	90 days
Payment	Transaction ID (no card data stored)	1 year
Support	Tickets, messages, attachments	Until account deletion

4. Processing Methods

• Automated processing in information systems.
• Encrypted storage on secure servers.
• Data access is limited to authorized personnel only.

5. Data Transfers

• Data does not leave the servers hosting the Site.
• Payment data is processed exclusively by payment providers and is not stored on the Site.
• No cross-border data transfers are performed.

6. Data Protection

Security measures implemented:

• Password hashing with bcrypt algorithm.
• CSRF attack protection.
• HTTPS encryption for data transmission.
• Regular software updates.
• Restricted database access.

7. Data Subject Rights

You have the right to:

• Request information about processed data.
• Demand correction, blocking, or deletion of data.
• Withdraw consent for data processing.
• File a complaint with data protection authorities.

8. Contact Information

For data processing inquiries, use the contacts page or create a support ticket.