Privacy Policy
Last updated:October 24, 2026
This policy explains what the Society of Hispanic Professional Engineers chapter at Colorado Mesa University (SHPE @ CMU) collects through this website, why, who helps us handle it, and how you can delete it. We are a student club: we collect as little as we can and never sell your information.
What we collect
- Your name and email address, when you create an account.
- Your password in scrambled (hashed) form. We never store or see the password itself.
- When you confirmed you are 13 or older and agreed to this policy and our terms, and which version of this policy you agreed to.
- Which newsletter topics you choose to receive.
- In the future, the club events you RSVP to.
- Short-lived records of sign-in, sign-up and password reset attempts (the email address entered and your IP address), used to stop abuse.
- Whatever you type into the contact form, when you send us a message.
Why we collect it
- To create your account, keep it secure and sign you in.
- To send the emails your account needs: confirming your address, password resets and security notices.
- To send the newsletters you choose, and only those.
- To plan club events and track RSVPs, once that feature launches.
- To answer messages you send us.
- To protect the site from spam and abuse.
Who helps us handle it
These service providers process data only to run this site for us. We don’t sell or share your information with anyone else, including advertisers, unless the law requires it.
- Vercel hosts the website and handles every request you make to it.
- Neon hosts our database, which stores your account.
- Resend delivers our emails.
- Formspree delivers messages sent through the contact form.
Cookies
We only use cookies that are strictly necessary to sign you in and keep you signed in securely, so there is no cookie banner. We don’t use analytics, advertising or tracking cookies. Your light or dark theme choice is saved in your own browser and never sent to us.
How long we keep it
- Your account and newsletter choices: until you delete your account.
- Accounts whose email address is never confirmed: kept for 7 days, or until the last confirmation link we sent expires if that is later, then deleted automatically during later sign-up or new confirmation link requests.
- Records of sign-in, sign-up and password reset attempts: used for 15 minutes, then deleted automatically during later sign-in, sign-up or password-reset activity.
- Server logs of failed or blocked sign-in attempts (the email address entered and your IP address) and of blocked sign-up, new confirmation link and password reset requests (your IP address): kept for a limited time by our host, Vercel, then deleted.
- Email confirmation links stop working after 24 hours, and password reset links after 1 hour.
Your choices
- Change which newsletters you receive at any time from your account page.
- Delete your account at any time: sign in, open your account page and choose “Delete my account.” Your account and newsletter choices are removed right away.
- Ask us for a copy of your information, or to correct it, using the contact details below.
Children
This site is not directed to children under 13, and you must be 13 or older to create an account. If you believe a child under 13 has given us information, contact us and we will delete it.
Changes to this policy
If we change this policy, we will update the date at the top of this page. If a change affects how we use information you already gave us, we will email account holders first.