What we store, and why

Who runs this site

TJ Policy Debate is a student activity at Thomas Jefferson High School for Science and Technology. The site is built and maintained by the elected officer team. Questions about anything on this page go to tjhsstpolicy1@gmail.com.

Signing in

Sign-in goes through Ion, the school’s own intranet, using OAuth. You enter your password on ion.tjhsst.edu and never on this site. We never see it, never receive it, and never store it.

When Ion confirms who you are, it returns your name, Ion username, school email, grade, and graduation year. Those are stored so officers can tell members apart and enter the right people on Tabroom.

What is stored about a member

Once you have signed in, the site may hold:

• From Ion: name, Ion username, school email address, grade, graduation year. These refresh each time you sign in.
• You provide: a contact email, phone number, preferred partner, NSDA member ID, and the events you compete in.
• Tournament entries: for each registration, your partner’s name, your school and Tabroom email addresses, your phone number, your grade at the time, your partner’s school email, and any note you add. This is collected fresh per tournament because officers need an accurate snapshot for Tabroom entry and day-of contact.
• Money owed: tournament fees and apparel orders, and whether an officer has marked each one paid. This site never takes a payment and never sees card or bank details — payment happens on MySchoolBucks.
• Results: awards and placements an officer records.

Cookies

Two cookies, both strictly necessary. Neither is used for advertising or tracking.

• tjpd_session — proves you are signed in. It holds a random token and nothing else: no name, no role, no ID. It expires after 7 days, or immediately when you sign out.
• tjpd_csrf — blocks a malicious page from submitting a form to this site as you.

Because both are required for the site to function at all, there is no consent toggle for them. Declining them is the same as not signing in.

Analytics

If analytics is enabled on this deployment, it is Plausible, which sets no cookie and stores no device fingerprint or identifier. It records page views, referrer, and coarse device type in aggregate. It cannot follow you across sites and cannot be tied back to you.

There are no advertising networks, no social media pixels, and no session-recording tools on this site.

Security records

Administrative actions — role changes, dues updates, publishing — are written to an audit log so a mistake can be traced. Each entry records who acted, what they did, and when.

Sign-in records store your browser’s user-agent string and a hashed form of your IP address. The IP is never stored in readable form; it is put through a one-way hash with a secret key, so it can be matched against itself but not read back.

Who can see your information

• You see everything about yourself in the member portal.
• Officers see member records, registrations, dues, and orders. That is the job — they enter the squad on Tabroom and chase fees.
• The public sees only the officer roster and anything an officer deliberately publishes to the news or results pages. Dues, orders, registrations, phone numbers, and school email addresses are never shown publicly.

Your information is not sold, rented, or given to advertisers. Entering a tournament necessarily means your name and details are given to that tournament’s host through Tabroom, which runs under its own privacy policy.

Keeping and deleting information

Records are kept while you are on the team and for a period afterwards so the club keeps an accurate competitive history.

You can ask an officer to delete your account. Doing so permanently removes your profile, registrations, dues history, orders, and awards. Content you wrote for the team — a news post, for instance — stays up but is no longer attributed to your account. Deletion cannot be undone; signing in again creates a new, empty account.

To correct something that came from Ion, update your Ion profile and sign in again — the site re-reads it each time. Anything else, ask an officer or email tjhsstpolicy1@gmail.com.

Students under 13

This site is for students at TJHSST, who are generally 14 or older. It is not directed at children under 13 and we do not knowingly create accounts for them. If you believe one exists, contact an officer and it will be removed.

Changes

If what the site stores changes, this page changes with it. The date at the top is the last time it was revised.

A note on scope

This page describes how a student-run club website handles information. It is a plain-language description of the software’s actual behaviour, not legal advice, and it is not a statement of compliance with any particular regulation. School policy governs where the two differ — if this site is adopted officially, the school’s administration should review this page first.