Privacy

Privacy policy

Last updated 5 September 2026.

CaseLeague is a directory of business case competitions. This page describes exactly what the site collects and what it does with it. It describes the site as it actually behaves — not as a general statement of intent.

What we collect

If you create an organizer account, we store your email address, the display name you choose, and a hashed form of your password. Passwords are hashed with scrypt and are never stored or logged in a readable form, which means we cannot tell you your password — only help you replace it.

If you submit a listing, we store what you enter in the form: the competition's name, description, dates, location, format, prize and fee amounts, team sizes, eligibility notes, contact address, website address, and any image you upload.

We do not ask for, and have no way to receive, payment details.

Cookies

The site sets a session cookie when you log in, and a second “remember me” cookie only if you tick that box, which lasts thirty days. Forms carry a CSRF token to prevent other sites submitting on your behalf.

That is the complete list. There are no analytics cookies, no advertising cookies, and no third-party tracking scripts of any kind on this site.

IP addresses

Sign-in attempts are rate limited by IP address to make password guessing impractical. Those counters are held in memory only, are never written to the database, and are discarded when the server restarts.

Who else sees your data

Two service providers, and no others:

• Neon hosts the database, in the United States. Everything described above is stored there.
• Cloudinary stores and delivers uploaded images. Only the image file itself is sent — no account information accompanies it.

We do not sell your data, share it for advertising, or pass it to anyone else.

What is visible to the public

Everything on a published listing is public, including the display name of whoever submitted it and any contact address entered in the listing's own contact field.

The email address you sign up with is never shown publicly. It is used only to identify your account at sign-in.

Email we send you

None. The site does not currently send email of any kind, so there is nothing to unsubscribe from. If that changes, this page will change first.

Deleting your data

You can delete any listing you submitted from your dashboard. Deleting a listing also destroys its uploaded image at Cloudinary, rather than leaving it stored.

To delete your account entirely, or to ask what we hold about you or have it corrected, write to admin@caseleague.org. Deleting an account also deletes the listings submitted from it.

Changes to this policy

If this policy changes, the date at the top of this page changes with it.

Questions: admin@caseleague.org