Darkstar 100x registration. Effective: June 2026
In short: your registration data is encrypted by our application before it is stored, kept exclusively on AWS infrastructure in the European Union, used only to validate and approve attendees for this event, and deleted within 30 days after the event. Questions: privacy@darkstar.ee.
Darkstar Coalition is the data controller for personal data processed through this registration site for Darkstar 100x. We organise defence technology events, camps, and related programmes.
This policy applies to personal data submitted through the 100x registration form and to technical data collected when you visit this site. For our other programmes and websites, see the privacy policy published on darkstar.ee.
When you register, we collect exactly what you enter into the form:
For abuse prevention we additionally process your IP address (stored only as a keyed, irreversible hash), your browser user-agent string, and a reCAPTCHA verification score. We do not collect anything else, and the form has no hidden tracking.
| Purpose | Data used | Legal basis | Retention |
|---|---|---|---|
| Validate and approve attendees for the event | All registration data | Consent | Deleted within 30 days after the event |
| Communicate approval status, entry credential (QR code), venue, and timing | Name, email | Consent | Deleted within 30 days after the event |
| Event-day entry control (QR scan at the door) | Name, entry credential | Consent / legitimate interest (event security) | Deleted within 30 days after the event |
| Abuse and spam prevention | Hashed IP, user-agent, reCAPTCHA score | Legitimate interest | Deleted within 30 days after the event |
That is the complete list. Your data is used only for attendee validation and approval for this event and the directly related logistics above. We do not use it for marketing, we do not sell it, we do not share it with sponsors or partners, and we do not use it for automated decision-making or profiling. Approval decisions are made by people.
We treat event registration data as sensitive and apply the following technical and organisational measures:
All registration data, including approved-attendee records, entry credentials, and abuse-prevention metadata, is deleted within 30 days after the event takes place. If you are not approved, or the event is cancelled, your data is deleted on the same schedule or earlier. You can also request deletion at any time before that (see your rights below).
We keep the list of providers deliberately short:
| Provider | What they do | Data involved | Location |
|---|---|---|---|
| Amazon Web Services (AWS) | Hosts this site and stores encrypted registration data; sends transactional email (approval, credential, reminders) | Encrypted registration records; email address and name for transactional email | EU (Frankfurt, eu-central-1) |
| Google LLC (reCAPTCHA) | Bot and abuse detection on the registration form | IP address, browser signals (processed by Google under its own terms) | EU / US (EU-US Data Privacy Framework) |
| Google LLC (Analytics) | Aggregate site traffic measurement | Anonymised IP, page views, browser signals | EU / US (EU-US Data Privacy Framework) |
Registration data itself never leaves AWS EU infrastructure. Besides reCAPTCHA, the site uses Google Analytics (with IP anonymisation) to measure aggregate page traffic; analytics data is never linked to your registration. No advertising scripts are used.
Under the EU General Data Protection Regulation (GDPR) and Estonian data protection law, you have the right to:
To exercise any of these rights, email privacy@darkstar.ee. We respond within 30 days.
If you believe we have not handled your data correctly, you can lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) at aki.ee, or with the supervisory authority in your country of residence.
This site sets no cookies of its own. Google reCAPTCHA may set cookies required for bot detection, and Google Analytics may set cookies to measure aggregate site traffic (with IP anonymisation enabled); both are governed by the Google Privacy Policy. Analytics data is aggregate usage measurement only and is never combined with your registration data.
This event and site are not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors.
Material changes will be posted on this page and the effective date above will be updated. Since data is deleted after the event, this policy has a naturally limited lifespan.
Darkstar Coalition
Email: privacy@darkstar.ee
Web: darkstar.ee