Privacy Policy

This policy explains how GDG Cloud Bandung ("we", "us") collects, uses, stores and protects your personal data when you use DevFest Bandung 2026: this website, ticket registration and purchase, the partnership form, the participant app and the organizer tools.

We process personal data under Law No. 27 of 2022 on Personal Data Protection (UU PDP) and other applicable Indonesian regulations. By using these services, you agree to the practices in this policy.

Depending on how you use the services, we may collect:

• Account: your name, email address, password (stored only as a secure hash) and role (participant, organizer, booth staff or admin).
• Profile: your job title, company or organization, bio and profile photo, all optional.
• Google Sign-In: your Google ID, name, email address and profile photo, if you choose to sign in with Google.
• Tickets: the name, email address and phone number of the buyer and each attendee, plus order details and payment status.
• Payments: the amount, method, transaction reference and, for manual QRIS payments, the transfer proof images you upload.
• At the event: check-in and check-out times, ticket QR codes, session bookings and scans by organizers.
• Connections: the attendees you connect with by scanning QR codes, and the booths that save your profile as a contact.
• Points and quests: your points, the answers and photos you submit for quests, and the rewards you claim.
• Partnership inquiries: company details and the contact person's name, email address and WhatsApp number.
• Technical: device information and basic logs we need to keep the services secure and running.

• From you, when you create an account, fill in a form, buy a ticket or upload payment proof.
• From Google, if you choose to sign in with Google.
• From your use of the services, such as system logs and check-in records.

• To create and manage your account and give you access to the event.
• To process registrations and ticket purchases, verify payments and send your e-tickets.
• To tell you about the event, your tickets and any schedule changes.
• To run check-in, session bookings, points, quests and rewards on the day.
• To reply to partnership inquiries.
• To keep the services secure, prevent misuse and meet our legal obligations.

We process personal data based on your consent, on our contract with you (for example, delivering the ticket you bought) and on our legitimate interest in running the event safely and efficiently.

We do not sell your personal data. We share it only as far as we need to run the event:

• Payment providers, such as payment gateways and QRIS providers, to process and verify payments.
• Email providers, to deliver e-tickets and event updates.
• Google, if you sign in with Google.
• Cloudflare, which hosts this website and checks that our forms are sent by people, not bots.
• Sentry, which reports errors on this website so we can fix them. Reports carry the page and browser, not your account or IP address.
• Sponsors and partners, who receive only aggregated numbers that do not identify you.

Other attendees and booth staff see your name, job title and company only when you let them scan your QR code. Booth staff may save these details as a contact.

These providers process data only on our instructions and under applicable law.

We store data on our own servers and with the providers above. We keep it while your account is active, or for as long as we need it to run the event and meet legal obligations. After that, we delete or anonymize it.

We use reasonable technical and organizational measures, including access controls, encrypted connections (HTTPS) and hashed passwords. No way of sending or storing data is completely free of risk, so we cannot guarantee absolute security.

Under the UU PDP, you can ask us to:

• Tell you what personal data we hold about you.
• Correct data that is wrong or out of date.
• Delete your personal data, unless the law requires us to keep it.
• Stop processing that relies on your consent, by withdrawing it.
• Stop specific processing you object to.

To use any of these rights, email us at the address below.

We use your browser's local storage to keep you signed in and remember your preferences. This website also loads Google Tag Manager, which may set cookies to measure how visitors use the site. We do not use cookies for advertising.

The services are meant for people aged 18 and over. If you are under 18, register only with the consent of a parent or guardian.

We may update this policy from time to time. We post every change on this page and update the date at the top.

Questions or requests about your personal data? Email us at [email protected].