Back to Home

Privacy Policy

Effective Date: January 22, 2026

1) Overview

MedHack (“we,” “us,” or “our”) provides a website that allows users to register for the MedHack event by submitting a Google Form embedded on our site. To submit the form, users must sign in with their Google account.

This Privacy Policy explains how MedHack accesses, uses, and shares information, including any Google user data obtained through Google APIs.

2) Information We Collect

A. Google Account Sign-In (Google OAuth)

When you sign in with Google to register, Google provides MedHack with limited information necessary for authentication, such as:

  • Google account identifier
  • Basic profile information (name and email) only if requested by the OAuth scope

B. Form Responses

Your registration details are submitted directly to Google Forms and stored under the form owner’s Google account. MedHack does not store these responses on its own servers.

C. Technical/Log Data

We may collect minimal technical data (timestamps, request metadata) solely to ensure the registration process works correctly and to prevent duplicate submissions.

3) How We Use Information

Information is used only to:

  • Authenticate users for registration via Google Sign-In
  • Submit and verify registration through the embedded Google Form
  • Ensure proper functioning and security of the registration process

MedHack does not use Google user data for advertising, profiling, or selling.

4) Google User Data and Limited Use

MedHack complies with Google’s API Services User Data Policy, including Limited Use requirements:

  • Google user data is accessed only to enable registration through Google Sign-In
  • We do not serve ads using Google user data
  • We do not sell or transfer Google user data for unrelated purposes

5) Data Storage

MedHack servers

Only minimal session/authentication data (e.g., temporary tokens) may be stored temporarily to complete the registration flow.

Google Forms

All registration responses are stored securely in Google’s infrastructure, under the form owner’s account.

6) Sharing and Disclosure

We do not share your Google user data with third parties for marketing purposes. Data may only be shared:

  • With Google, to authenticate and submit registration
  • With service providers supporting MedHack’s website infrastructure (limited technical access only)
  • If required by law or to protect safety and security

7) Required Google Sign-In

To register for MedHack, you must sign in with a Google account. Users who do not sign in will be unable to access the registration form and will not be registered for the event.

8) Data Retention

  • Session/authentication data: retained only as long as needed to complete the registration process
  • Form responses: stored by Google according to the form owner’s settings

9) Children’s Privacy

MedHack is not intended for children under 13. We do not knowingly collect information from children under 13.

10) International Users

By accessing MedHack from outside the country of operation, you acknowledge that your information may be processed in other jurisdictions where Google operates.

11) Changes to This Policy

We may update this Privacy Policy at any time. The “Effective Date” will be updated whenever changes are posted.

12) Contact

For questions about this Privacy Policy or data handling, contact: info@medhack.org