Skip to main content

Privacy policy

Privacy at Hacktivate

Last updated 19th August 2026.

Hacktivate has been designed for maximum privacy: we store a little as possible to operate the service, and use as few third-party tools as possible to restrict how your data is transferred.

Information Hacktivate keeps

Hacktivate keeps the account and organisation information needed to provide the service. Depending on the account type, this can include names, usernames, email addresses, organisation and class or group membership, authentication information, and administrator details.

Learning records can include challenge progress, scores, hints, submitted solutions, activity, achievement records, and other records needed to show progress to a learner and their organisation administrator.

How information is used

We use this information to operate Hacktivate, secure accounts, save progress, provide feedback, support learners and administrators, send essential account email, and produce organisation reports requested by administrators.

Technical request information can be recorded in server logs to keep the service reliable, investigate errors, and protect accounts from misuse.

School and organisation accounts

Organisation administrators manage their learners and can view learning records for people in their organisation. School learner accounts do not require an email address. Questions about an organisation-managed learner account should normally go to that organisation first.

Toolbox, Editor, and Utilities

Inputs and outputs in the Toolbox, Editor, and Utilities are page-local and are not saved to a Hacktivate account. Closing or reloading the page clears that working state. A small number of explicitly networked tools send only the request needed to perform their stated operation.

AI challenges

This only applies if your organisation has requested access to the AI curriculum.

Some AI challenges send learner text to OpenAI to produce a response. Learners should not enter personal, confidential, or sensitive information into an AI challenge. Prompts blocked by Hacktivate's safety controls can be retained for review by the learner's organisation administrator.

Map

The Map page does not ask for device location, and Hacktivate does not save map searches or coordinates. Place-name searches are sent directly from the browser to Apple Maps after the learner presses Search. Coordinate input is parsed in the browser, but Apple receives the map requests needed to display the area being viewed.

Apple supplies the map, search results, and imagery while the Map page is open. See Apple's Maps privacy information.

Email and service providers

Hacktivate uses Resend for essential account email. Messages are queued securely before delivery. We also use specialist providers where a feature requires them, including Apple for maps and OpenAI for interactive AI challenges when the AI curriculum is enabled.

Cookies and browser storage

Hacktivate uses essential cookies to keep people signed in, protect forms, and support organisation features. Browser storage can also be used for essential cross-tab account coordination. Hacktivate does not use this storage for advertising.

Access, correction, and deletion

For an organisation-managed account, contact the organisation administrator first. For other privacy questions, or to ask about access, correction, or deletion, email hello@hacktivate.io.

Who operates Hacktivate

Hacktivate is operated by Hudson Heavy Industries Ltd. Contact us at hello@hacktivate.io.