Privacy

What we collect

For an administrator: the email address used to sign in, the organization name, domain and address chosen at signup, and which services the dashboard displays. For a visitor looking at a dashboard: nothing that identifies them. We do not require an account to view a dashboard and we do not set advertising or tracking cookies.

Two things we do keep about visitors. One cookie, for 30 days, remembers which of our web addresses you first arrived at. And if you visit a dashboard address that does not exist, we keep your network address for up to two days, to slow down anyone guessing addresses.

“Is it working for you?”

Each service row has a one-click way to say whether it is working for you. We use those clicks to show other schools what people are seeing, which is often faster than the vendor’s own status page.

We do not store your IP address. It is converted to a one-way fingerprint using a secret that changes every day, which is enough to stop one person clicking a hundred times and not enough to identify anyone or to link what you clicked today to what you clicked yesterday. No individual report is readable by us, by your school, or by anyone else — the only thing that can be read is a count, and only once enough people have reported for a count to mean anything.

No account is needed. Your browser keeps a random id so that one person counts once, and nothing follows you to another site. Reports, and each day’s secret, are deleted after two days.

Staff email addresses

A school on the paid plan can tell its staff when something is down. To do that it gives us staff email addresses, which we store and use for nothing else — no marketing, no sharing, no other school.

Every address has to be at the school’s own verified domain. That is enforced in the database, not just in the form, and it is what keeps this an outage notice rather than a mailing list. Every message carries an unsubscribe link that works immediately and permanently, without an account.

A school can remove an address at any time, and removing the dashboard removes the list with it.

Student data

We do not collect or keep student data. This service reads vendors’ public status pages. If your school turns on sign-in checks, we sign in to your own account on that service to check that signing in works. The page we land on may show student information: we read it only to see whether the sign-in worked, and we do not store it.

Visibility of your dashboard

Dashboards are reachable by anyone with the link and are excluded from search engines by default. Listing your dashboard publicly and allowing search engines to index it are two separate, explicit choices in your settings.

We default both to off deliberately. A page stating that a named school uses a particular set of vendors tells anyone building a targeted phishing message exactly which vendor to impersonate, and that trade-off should be yours to make knowingly rather than by accident.

Analytics

We do not use analytics or tracking of any kind.

Deleting your data

Email support@etpcampus.com from your administrator address and we will delete your dashboard and account.