Privacy Policy
This policy describes how gmhsminithon.org collects, uses, and handles your information. It covers the public website, newsletter signup, and the members-only portal.
Information We Collect
Newsletter subscriptions. If you sign up for our newsletter, we collect your email address.
Member portal authentication. When you sign into the
members portal via Shoo (shoo.dev), we receive and verify your Shoo
identity token and use your Shoo user ID (pairwise_sub)
to determine whether your account is approved for member access.
Technical and operational data. Our hosting infrastructure automatically processes standard request metadata and performance data necessary to deliver and secure the site.
We do not collect more information than what is described above.
How We Use Your Information
- To operate the public website and members portal.
- To verify member portal access against an administrator-maintained approval list.
- To send newsletter updates to subscribers.
- To monitor site performance, diagnose issues, and protect against misuse.
Members Portal
The members portal uses Shoo (shoo.dev) for authentication. After Shoo verifies your identity, this site checks your Shoo user ID against a private approval list maintained by GMHS Mini-THON administrators. That list may be stored in server environment variables and/or a private Google Sheet configured by administrators.
If your account is not yet approved, the sign-in flow may display your Shoo user ID so you can share it with an administrator to request access.
Upon successful authentication, the site issues a short-lived session cookie so you can navigate protected pages without re-authenticating on each load.
Third-Party Services
| Service | Purpose |
|---|---|
| Shoo (shoo.dev) | Member portal authentication |
| EmailOctopus | Newsletter subscriptions (when enabled) |
| Vercel | Hosting, analytics, and performance monitoring |
| Google Sheets | Administrator-managed member approval list |
When you interact with these services through this site, their own privacy policies and terms of service also apply. We encourage you to review those policies directly.
Data Sharing and Retention
We do not sell personal information.
We share data only with the service providers listed above, and only as necessary to operate the site. Data is retained only for as long as it is needed for its stated purpose - such as maintaining the member approval list, keeping a newsletter subscription active, or retaining short-lived session and diagnostic data.
Cookies
The members portal sets a short-lived session cookie after successful sign-in to maintain your authenticated session. Vercel may also use service-side telemetry to measure site reliability and performance.
Your Privacy Rights
Depending on your location, you may have the right to access, correct, delete, or restrict certain personal data we hold. You can also unsubscribe from newsletter emails at any time using the unsubscribe link in any email we send.
You are not required to use the members portal or newsletter signup. To ask about, update, or request removal of information associated with this site, contact us at hello@gmhsminithon.org .
Children's Privacy
This site is intended for the GMHS Mini-THON school community. We do not knowingly collect personal information from children under 13 without appropriate parental or school authorization in compliance with the Children's Online Privacy Protection Act (COPPA). If you believe a child under 13 has submitted personal information in error, contact us at hello@gmhsminithon.org and we will promptly review and address it.
Changes to This Policy
We may update this policy to reflect changes to the site or its services. Material updates will be noted by a revised "Last updated" date at the top of this page.
Contact
Questions about this policy or your data:
hello@gmhsminithon.org
This policy explains our current data practices in plain language. It is not legal advice. This site may link to third-party services outside our control - we are not responsible for their privacy practices.