Privacy Policy
Effective October 24, 2026
This policy explains what AI Hacker Camp collects, why, who we share it with, and the choices you have. It covers aihackercamp.com, our emails, and our community spaces that link to this policy.
The short version: we collect what we need to send your downloads, ship your merch, take payments through our payment partners, and keep the site safe. We do not sell your personal information, and we do not run ad trackers.
What we collect
When you get the free kit
- Your email address.
- Where you signed up (for example "free-kit"), when you signed up, and how many times we sent you the kit.
- Download activity for the kit link (how many times it was downloaded and when).
When you buy a digital product or membership
- Your email address. For card and PayPal payments, PayPal passes us the email on your PayPal account. For crypto, you type it in.
- Order details: what you bought, the price, the currency, the billing interval for memberships, the payment provider, the provider's transaction or order ID, the order status, and when it was created, paid, or refunded.
- For security products, a record that you confirmed our Authorized Use Policy.
- Download activity for each file in your order.
- Your name, if your payment provider passes it to us or you give it to us.
When you buy merch
- Your name, shipping address, email, and phone number if you give one, so the order can be printed, shipped, and tracked.
- What you ordered (design, product, size, color, quantity) and the shipping method.
When you contact us
- Your email address and whatever you write to us.
When you link Discord
- Your Discord user ID and username, so we can give you the right role.
- Which roles your account should have, and a log of the role changes we make.
- We do not keep your Discord login tokens.
Automatically, when you use the site
- Your IP address. We use it to limit how many requests one connection can make (for example, to stop signup and checkout abuse). We store a keyed hash of it for rate limiting, not the raw address. Our hosting provider also records standard server logs: IP address, browser type, the page requested, and the time.
- A short summary of your last order is kept in your browser's session storage so the thank you page can show your download links. It is not a cookie and it is cleared when you close the tab.
What we do not collect
- Card numbers or bank details. PayPal and Atlos handle payment details on their own systems and never send them to us.
- Passwords. There are no user accounts on the site.
- Precise location, contacts, or anything from your device beyond what is listed above.
Crypto payments
Crypto payments are processed by Atlos. Blockchain transactions are public by design: the paying wallet address, the amount, and the transaction hash are visible to anyone on the blockchain. We receive the Atlos transaction ID and the details listed above. If we send money back for a crypto payment (for example, to reverse a duplicate charge or pass along an approved merch refund), we use the wallet address that paid.
How we use it
- To deliver what you bought: send download links, run your membership, and print and ship merch.
- To send the free kit and, if you signed up for it, a short series of emails and occasional updates. Every marketing email has an unsubscribe link.
- To answer support requests, resend or replace files, handle merch claims, correct charges made in error, and handle chargebacks and disputes.
- To prevent fraud and abuse, enforce our Terms and Authorized Use Policy, and keep the site secure.
- To keep records we are required to keep, such as tax and accounting records.
- To understand, in aggregate, which pages and products people use, so we can improve them.
If you are in the European Economic Area or the UK, our legal bases are: performing our contract with you (orders, delivery, support); your consent (marketing emails, which you can withdraw at any time); our legitimate interests (security, fraud prevention, rate limiting, improving the site, handling disputes); and legal obligations (tax and accounting records).
Who we share it with
We share personal information only with service providers that help us run the business, and only what each needs:
| Provider | What for | What they get |
|---|---|---|
| PayPal | Card and PayPal payments, refunds, disputes | Order amount and item name. PayPal collects your payment details directly. |
| Atlos | Crypto payments | Order amount, order reference, your email |
| Vercel | Website hosting, private file storage for downloads, server logs | Data that passes through the site |
| Neon | Database hosting for orders, signups, and download records | The order and signup data described above |
| Resend | Sending delivery emails and the free kit, and managing our email list | Your email address and the email content |
| Fourthwall | Printing and shipping merch, and reviewing merch claims | Your name, shipping address, email, phone if given, the items ordered, and any photos and details you send us for a claim |
| Postal carriers (for example USPS, UPS, DHL) | Delivering merch | Your name and shipping address |
| Discord | Membership roles and server access, when you choose to link | Your Discord user ID and username, and the roles you should have |
We may also share information if the law requires it, to protect our rights or someone's safety, or as part of a sale or reorganization of the business (the new owner would have to honor this policy).
We do not sell your personal information, and we do not share it for cross context behavioral advertising. We do not use ad pixels or third party ad trackers.
Cookies and similar technology
Our own code does not set cookies. See our Cookie Notice at /legal/cookies for the cookies our payment partners set when you use checkout.
How long we keep it
| Data | How long |
|---|---|
| Order and payment records | 7 years after the order, for tax, accounting, and dispute purposes |
| Download records | As long as the order record |
| Free kit signup | Until you unsubscribe or ask us to delete it. After you unsubscribe we keep your email on a do not contact list so we do not email you again. |
| Merch shipping details | 2 years after delivery, for returns and support, then deleted or anonymized. Fourthwall keeps its own records under its own policy. |
| Support emails | 2 years after the conversation ends |
| IP addresses used for rate limiting | Up to 24 hours, stored as a keyed hash |
| Hosting server logs | Kept by our hosting provider for a short period under its own retention settings |
Your rights and choices
Everyone can:
- Unsubscribe from marketing emails using the link in any email, or by emailing us.
- Ask what personal information we have about you, ask us to correct it, or ask us to delete it.
If you live in a US state with a consumer privacy law (for example California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and others), you have the right to:
- Know what personal information we collect, use, and disclose, and get a copy of it in a portable format.
- Correct inaccurate personal information.
- Delete personal information, subject to exceptions such as records we must keep for tax purposes.
- Opt out of the sale or sharing of personal information and of targeted advertising. We do not do either. We also treat a Global Privacy Control signal as a valid opt out.
- Not be treated differently for using any of these rights.
- Use an authorized agent to make a request for you, and appeal if we deny your request (reply to our decision and ask for an appeal).
If you are in the EEA or the UK, you also have the right to restrict or object to our processing, to data portability, to withdraw consent at any time, and to complain to your local data protection authority.
How to make a request: email support@aihackercamp.com from the email address you used with us, and tell us what you want. We may ask you to confirm you control that email before we act. We respond within 30 days (45 days where state law allows, and we will tell you if we need the extra time).
International transfers
We are based in the United States and our service providers mostly process data in the United States. If you use the site from outside the US, your information will be transferred to and processed in the US. Where required, we rely on our providers' standard contractual clauses or similar safeguards.
Security
We use HTTPS everywhere, keep product files in private storage behind signed links that expire after 48 hours, limit how often requests can be made, and give access to personal data only to people and services that need it. No system is perfectly secure, so we cannot promise absolute security. If we learn of a breach that affects you, we will tell you as the law requires.
Children
The site is not meant for children. We do not knowingly collect personal information from anyone under 16. Purchases are for people who are 18 or older, or the age of majority where they live. If you think a child gave us information, email us and we will delete it.
Changes
If we change this policy we will update the effective date at the top. If a change is significant, we will put a notice on the site or email customers before it takes effect.
Contact
Email: support@aihackercamp.com