Privacy Policy

Effective for Eye Spy Art Beta 3.2.

Information collected

Eye Spy Art stores account information such as first name, last name, email address, role, course/roster membership, login activity, hunt responses, scores, instructor notes, and photographs uploaded for assigned museum activities.

Purpose

Data is used only to operate Eye Spy Art, administer course activities, support users, protect the service, and retain educational records for the stated retention period.

Sharing

Eye Spy Art does not sell personal information or share it for advertising, profiling, or unrelated commercial purposes. Technical service providers may process information only as necessary to host the site, database, email, backups, and related infrastructure.

Photographs

Student photographs are stored for instructor/teaching-assistant review and the associated educational activity. Photo-quality checks for blur and resolution are performed locally in the student's browser; photographs are not sent to a separate AI service for that check.

Retention

Student accounts, submissions, and uploaded photographs are normally retained for one year after the student's most recent applicable course/hunt activity, then deleted. If a student never submits a hunt, the one-year period is measured from the most recent roster/account activity. Staff accounts may remain active while needed; an inactive staff account is eligible for deletion one year after deactivation. Security logs may be retained for up to one year.

Account deletion

Users may request deletion from My Account. Records that are still within an applicable course or security retention period may be held until that period ends, then removed from the active system and associated uploaded-photo storage.

Minors

Eye Spy Art is intended initially for college-level use and is not designed or directed primarily to minors. If an institution plans to use the service with minors, privacy and consent requirements should be reviewed before use.

Security

Eye Spy Art uses encrypted HTTPS connections, role-based authorization, password hashing, server-side validation, protected file storage, CSRF protections, logging, and other safeguards. No internet service can guarantee absolute security.

Questions

Privacy or deletion questions should be directed to the Eye Spy Art site administrator or the instructor responsible for the applicable course.