What we keep. What we don't.

We collect the smallest amount of information that lets the show keep running: your email address if you subscribe to the dispatch, your pitch text if you submit one, your vote selection if you vote, and your application if you apply to the Underground.

We track a single first-party analytics cookie that counts page views in aggregate. We do not run third-party advertising trackers. We do not sell anything to data brokers. We will never share any list with a lawyer.

Pitches you submit are private by default. They become public only if they reach the weekly shortlist, and only with the wording you submitted. We never attach your name or email to a public pitch without your written opt-in.

Votes are private. Only the aggregated count is shown publicly. Underground membership status is private and visible only to you and to the operator.

Submissions live in our database until you ask us to delete them. Email addresses are kept until you unsubscribe. Logs are rotated every 30 days. Backups are encrypted and retained for 90 days.

Email privacy@blackhat.ink with the subject line FORGET ME and the email address you want removed. We confirm deletion within 7 days. You do not need to give a reason.

Supabase (Postgres + auth) hosted in us-east-1. Stripe for payments — they hold their own privacy policy. Beehiiv for the dispatch — same. Vercel for hosting and edge logs. That is the full third-party list.

If we change this policy in a way that affects how your data is handled, we will email everyone on the dispatch and pin a notice to the homepage for at least 30 days before the change takes effect.