Privacy Policy

This Privacy Policy explains how GDG Cloud Bandung ("we", "us") collects, uses, stores, and protects your personal data when you use the Cloud DevFest Bandung 2026 application and website (registration, ticket purchase, the participant app, and the organizer pages).

We process your personal data in accordance with Law No. 27 of 2022 on Personal Data Protection (UU PDP) and other applicable regulations in Indonesia. By using our services, you agree to the practices described in this policy.

We may collect the following types of data:

• Account data: name, email address, password (stored as a secure hash), and your role (participant, organizer, booth staff, admin).
• Profile data: job title, company/organization, bio, and profile photo (optional).
• Google account data: if you sign in with Google Sign-In, we receive your Google ID, name, email, and profile photo.
• Registration and ticket data: the name, email, and phone number of the buyer and attendees, order details, and payment status.
• Payment data: amount, method, transaction reference, and the transfer proof (image) you upload for manual QRIS payments.
• Attendance data: check-in/check-out status, ticket QR codes, and scanning activity.
• Gamification data: points, achievements, and quest/reward activity.
• Technical data: device information and basic logs required for the security and operation of the service.

• Directly from you, when you register an account, fill in a form, buy a ticket, or upload payment proof.
• From an identity provider, if you choose to sign in with Google.
• Automatically through your use of the service, such as system logs and check-in status.

• To create and manage your account and give you access to the event services.
• To process registration and ticket purchases, including payment verification and issuing electronic tickets (e-tickets).
• To send important information about the event, tickets, and schedule changes.
• To manage attendance, points, quests, and rewards during the event.
• To keep the service secure, prevent misuse, and comply with legal obligations.

We process your personal data based on your consent, the performance of a contract (for example, providing the ticket you purchased), and our legitimate interest in running the event safely and efficiently.

We do not sell your personal data. We may share data on a limited basis with parties that help run the event:

• Payment service providers (for example, a payment gateway or bank/QRIS provider) to process transactions and verify payments.
• Email service providers to send e-tickets and event information.
• Authentication service providers (Google) if you choose to sign in with Google.
• Event organizers, sponsors, or partners in the form of aggregated data or as needed for event operations, consistent with the purposes described above.

These third parties process data only according to our instructions and applicable legal obligations.

Data is stored on our servers and/or the service providers we use. We retain personal data for as long as your account is active or as needed to run the event and meet legal obligations. Once it is no longer needed, the data will be deleted or anonymized in line with our internal policy.

We apply reasonable technical and organizational measures to protect your personal data, including access controls, encrypted connections (HTTPS), and storing passwords as hashes. Nevertheless, no method of transmission or storage is completely free of risk.

Under the UU PDP, you have the right to:

• Request information about the personal data we process about you.
• Request updates or corrections to inaccurate data.
• Request the deletion of your personal data, subject to applicable legal obligations.
• Withdraw your consent for certain data processing.
• Object to certain data processing.

To exercise these rights, contact us using the email below.

Our application uses local device storage (local storage) to keep you signed in and to remember your preferences. We do not use cookies for third-party advertising tracking.

This service is intended for attendees aged 18 and over. If you are under 18, we ask for the consent of a parent or guardian before you register and use this service.

We may update this Privacy Policy from time to time. Changes will be shown on this page together with the date of the update.

Questions or requests regarding personal data can be sent to [email protected].