Privacy notice
How the portal handles personal data
This portal is invite-only. We collect only what we need to run accounts, team access, uploads, reviews, publication, notifications, and staff operations.
Effective July 28, 2026 · Consent version pilot-2026-07-28-seoul
What we collect
Account and contact details such as email address, display name, institution, verified-email status, and authentication or MFA metadata.
Invitation and access details such as team codes, named invitation tokens, and redemption or audit events.
Competition data such as roster information, applications, submissions, uploaded files, reviewer notes, results, and public release metadata.
Operational data such as notification records, validation jobs, and security or access logs.
Why we use it
To authenticate invited users, redeem team codes or invitations, manage team membership, and complete account setup.
To operate the competition workflow, including applications, file uploads, reviews, approvals, publication, and support.
To meet security, audit, and retention obligations for the competition record.
Overseas-processing consent
Overseas processing is based on your separate consent under Article 28-8(1)(1) of Korea's Personal Information Protection Act. The portal records the consent version and time when you complete or redeem access.
You may refuse by leaving the consent checkbox unchecked and contacting support@race2space.kr. Refusal has no effect outside this portal, but account completion, access redemption, and authenticated portal workflows cannot proceed.
You may later withdraw consent through the same address. Future portal access will be disabled, while official competition and audit records already required for integrity may remain under the retention schedule below.
Retention
Membership changes, removals, restores, and leadership changes are kept indefinitely as official history.
Official competition records, submissions, reviews, release history, and audit events are kept indefinitely as official competition history.
Invitation and team-code digests, redemption attempts, and failed access attempts are deleted 90 days after the season closes unless a dispute, investigation, or legal hold applies.
Draft working files stay for the season workspace lifetime and are deleted 365 days after season close unless a legal hold or approved retention rule applies.
Rejected or abandoned uploads are deleted after 7 days.
Email recipient addresses, message payloads, and delivery details are deleted 365 days after the final delivery attempt; the non-message audit state may remain as official history.
On an approved account-deletion request, access is disabled immediately and private identity or contact data is deleted or pseudonymized within 30 days unless it is part of an official record or legal hold.
Your rights and contact
You may request access, correction, deletion, or processing stop through the portal staff or by contacting support@race2space.kr.
If you need to update an invitation, a team record, or a published submission, contact the portal staff because official competition records are auditable.
Minors
This portal is intended for invited competition participants and staff. If a participant is under 14, do not proceed through the standard onboarding flow until a guardian-consent process has been approved by the organizers.
Processors and transfer details
Supabase, Inc.
- Country
- Republic of Korea (primary project region: Seoul) and United States for approved service, support, and security operations.
- Data
- Account identity, authentication metadata, team records, competition content, uploaded files, reviews, and operational logs.
- Timing and method
- Encrypted network transfer whenever you sign in, use the portal, or upload a file.
- Purpose
- Authentication, database, private storage, and security.
- Provider retention
- The portal schedule above governs primary records. Provider copies follow the service deletion and backup cycle after project or account termination.
Vercel Inc.
- Country
- Republic of Korea (current portal runtime: Seoul) and approved subprocessor locations.
- Data
- Portal requests, session and request metadata, form data in transit, deployment data, and operational logs.
- Timing and method
- Encrypted network transfer on each portal request and scheduled job.
- Purpose
- Hosting, deployment, scheduled jobs, availability, and security.
- Provider retention
- For the service term, followed by deletion within a commercially reasonable period; service-generated data is deleted or anonymized when no longer required.
Plus Five Five, Inc. (Resend)
- Country
- United States for account data, email metadata, logs, and API records.
- Data
- Recipient email address, recipient name when included, transactional message content, and delivery metadata.
- Timing and method
- Encrypted network transfer whenever the portal sends an invitation, verification, receipt, or operational message.
- Purpose
- Transactional email delivery, retry handling, and diagnostics.
- Provider retention
- For the active service term; customer data is deleted within 90 days after account termination, subject to legal retention.
Back to portal home
