Software Engineering Ethics

Lawful bases (Art. 6) include consent, contract, legal obligation, vital interests, public task and legitimate interests. Valid consent is freely given, specific, informed and unambiguous (an active choice, never a pre-ticked box) and as easy to withdraw as to give. Source: Regulation (EU) 2016/679 (GDPR).

// include/clubhub/Student.h (excerpt)
namespace clubhub {

// Only the fields that the data inventory allows
struct Student {
    std::string id;      // institute ID, e.g. "e20230417"
    std::string name;
    std::string email;
    // present only if the student opted in to SMS
    std::optional<std::string> phone;
};

// "e20230417" -> "e2******7": recognisable, not reusable
inline std::string maskId(std::string_view id) {
    std::string out{id};
    if (out.size() <= 3) return std::string(out.size(), '*');
    for (std::size_t i = 2; i + 1 < out.size(); ++i)
        out[i] = '*';
    return out;
}

// The ONLY form of a Student that may reach a log file
inline std::string redacted(const Student& s) {
    return "Student{id=" + maskId(s.id) + "}";
}
}  // namespace clubhub

// Monthly report row: a pseudonym, no name, no phone
struct AttendanceRow {
    std::size_t studentKey;   // keyed hash of the ID
    std::string eventId;
};

// Demo only: std::hash is NOT a cryptographic hash.
// Production: HMAC-SHA-256 from a crypto library.
inline std::size_t pseudonym(std::string_view id,
                             std::string_view secret) {
    std::string key{secret};
    key += id;
    return std::hash<std::string>{}(key);
}

// BAD: name and phone end up in a shared log file
// log << "registered " << s.name << " " << *s.phone;

// GOOD: masked ID and the event, nothing else
log << "registered " << redacted(s) << " for E-017\n";

registered Student{id=e2******7} for E-017

# How ITC Club Hub uses your data (v1.0, September 2026)

**Who we are.** Club Hub is run by the ITC student clubs office.
Contact: clubhub-privacy@itc.example (reply within 7 days).

**What we collect and why.**
- Student ID and name: to register you and check you in.
- Email: to log you in. Reminders only if you switch them on.
- Phone (optional): only for SMS reminders you ask for.
- Attendance: to run events and a monthly report per club.

**Who sees it.** Organisers see your name and a masked ID for
events you registered for. We never sell or give your data to
sponsors or advertisers.

**How long.** Attendance with your name: 12 months, then only
counts remain. Account: until 6 months after you graduate.

**Your choices.** See, correct, download or delete your data
at any time in *My profile*. Withdraw SMS consent in one click.

• Layered: a one-line summary on the form, the full notice one click away.
• Separate: one checkbox per purpose; no "I agree to everything".
• Not a condition: optional consent never blocks registration.
• Readable: short sentences, "we" and "you", no legal jargon; offer a Khmer version.

The first two lines of every source file, for example src/RegistrationService.cpp:

// SPDX-License-Identifier: MIT
// Copyright (c) 2026 Team Mekong, ITC Club Hub contributors

# Third-party notices

ITC Club Hub uses the following components.

| Component  | Version | Licence      | Used for | Shipped? |
|------------|---------|--------------|----------|----------|
| GoogleTest | 1.15.2  | BSD-3-Clause | tests    | no       |

## GoogleTest
Copyright 2008, Google Inc. All rights reserved.
Source: https://github.com/google/googletest
Full licence text: see licenses/googletest-LICENSE.txt

Repository files: LICENSE (full text of the chosen licence, at the root), the SPDX header in each source file, and THIRD_PARTY_NOTICES.md listing every dependency. GitHub detects LICENSE and shows the licence on the repository page.

// The word carries the meaning; colour repeats it
std::string_view statusLabel(RegistrationStatus s) {
    switch (s) {
    case RegistrationStatus::Registered:
        return "REGISTERED";
    case RegistrationStatus::Waitlisted:
        return "WAITLISTED";
    case RegistrationStatus::Cancelled:
        return "CANCELLED";
    case RegistrationStatus::CheckedIn:
        return "CHECKED IN";
    }
    return "UNKNOWN";
}

// no-color.org: any NO_COLOR value disables colour
bool colourEnabled(bool noColorFlag) {
    return !noColorFlag &&
           std::getenv("NO_COLOR") == nullptr;
}

Error: cannot register for "Git Workshop" (E-017):
the event is full (40 of 40 seats).
Next step: clubhub waitlist E-017

// Attendance export: cells that start with = + - @ tab
// or CR run as formulas when an organiser opens the file
// in a spreadsheet (CSV injection). Neutralise them.
std::string csvCell(std::string_view raw) {
    constexpr std::string_view risky{"=+-@\t\r"};
    std::string out = "\"";
    if (!raw.empty() &&
        risky.find(raw.front()) != std::string_view::npos)
        out += '\'';
    for (char c : raw) {
        // RFC 4180: a quote inside a field is doubled
        if (c == '"') out += '"';
        out += c;
    }
    return out + '"';
}

csvCell("Git Workshop")      -> "Git Workshop"
csvCell("=HYPERLINK(\"x\")") -> "'=HYPERLINK(""x"")"

# Security policy (SECURITY.md)

## Reporting a vulnerability
Please do not open a public issue. Email
clubhub-security@itc.example with steps to reproduce.
We reply within 3 working days and aim to fix
within 30 days. We credit reporters who wish it.

## Scope
The C++ core and CLI in this repository. Do not test
against real student data or systems you do not own.