Security, privacy & student data

• Account details: email address and, if given, first and last name.
• Page content the student enters: display name, school, graduation year, photos, senior quote, bio, future plans, achievements, links.
• Messages left by visitors: guestbook signatures and time capsule notes, with the name the visitor typed.
• Aggregate counts: page views, signatures, taps on links. Counts only.
• Payment records: plan, amount and status. Card details are handled by our payment processor and never reach our servers.

• No advertising, ad networks or ad targeting.
• No selling or renting of personal information.
• No per-visitor tracking profiles, cross-site tracking or third-party trackers.
• No importing of grades, transcripts, discipline records or any SIS data.
• No requirement for a student to provide a home address or phone number.

A Senior Site is student-owned. The student decides what to publish, whether the page is public, unlisted, password protected or private, and whether they appear in the student directory for their school on MySenior.site.

School affiliation requests are reviewed manually. A school listing or student-selected school does not imply partnership or give school staff access to a student's personal page.

• A student can unpublish at any time, and can request full account and content deletion from their account settings.
• A campus or district can report misuse of its name or request review of school-related content.
• Deletion requests are actioned within 30 days. Payment records are retained only as required for accounting.
• Contact for deletion and data questions: support@mysenior.site.

• Application hosting and content delivery — serves the site.
• Database, authentication and file storage — stores accounts, page content and photos.
• Payment processing — card payments are handled by our payment processor; referral payouts are processed separately. We never store card numbers.
• Transactional email — sends verification, receipt and notification emails.

Each processor is used only to run the service. A current list of named vendors is available to schools on request.

• Guestbook messages are held for approval by default before appearing.
• Rate limits and length limits reduce spam and abuse.
• Any visitor can report a page; reports go to a review queue.
• Reserved usernames prevent impersonation of the platform or of schools.
• Students can make a page unlisted or private, or unpublish entirely.
• Accounts require a verified email address before use.

• Traffic is encrypted in transit; stored data is encrypted at rest by our provider.
• Database access is restricted by row-level security so an account can only reach its own records.
• Administrative access is limited to a small number of platform staff accounts.
• Passwords are hashed by our authentication provider and never visible to us.

MySenior.site is not a student information system. We do not receive education records from a school, and everything on a Senior Site is entered voluntarily by the student who owns it. On an institutional deployment, a campus can direct removal of content connected to the school, and we act on those requests.

The service is intended for high school seniors and adults, and is not directed to children under 13. We do not knowingly create accounts for children under 13.

We describe our practices here rather than claiming a certification. If your district requires a signed data privacy agreement, a vendor questionnaire or a specific addendum, we will review and complete it as part of the procurement process.