# Student Data Privacy Notice **CSCD 240: C and Unix Programming** | Eastern Washington University | Spring 2026 This course companion site collects and processes student data to support your learning and to calculate weekly participation grades. This notice explains what data is collected, how it is used, and your rights under the Family Educational Rights and Privacy Act (FERPA). --- ## What Data Is Collected When you sign in with GitHub and join the course, the following data is collected: **Identity (from GitHub OAuth):** - GitHub username and display name - Email address associated with your GitHub account **Academic activity (from your site usage):** - Lesson completions and time spent reading - Quiz attempts and results (correct/incorrect) - Skill drill attempts and results - XP earned and skill mastery progress - Timestamps of all activity **No other personal data is collected.** The site does not collect demographic information, financial data, health information, or browser telemetry beyond what is listed above. --- ## How Your Data Is Used Your data is used for three purposes: 1. **Displaying your progress to you** — the site shows your reading progress, skill levels, and achievements so you can track your own learning. 2. **Calculating participation grades** — your reading completions and skill levels are used to compute weekly participation scores, which are posted to Canvas. 3. **Course management** — the instructor uses aggregate data (class averages, at-risk alerts) to improve the course. Individual data is reviewed only when necessary for grading or academic support. Your data is **never** sold, shared with advertisers, or used for purposes unrelated to this course. --- ## Where Your Data Is Stored | System | Data Stored | Location | |--------|------------|----------| | **Your browser** (localStorage) | All progress data (offline-first) | Your device only | | **PocketBase** (course server) | Progress events, enrollment, user profile | US-based DigitalOcean server | | **Canvas LMS** | Computed grades and feedback comments | EWU institutional infrastructure | Data transmitted between your browser and the server is encrypted in transit (HTTPS/TLS). The course server is hosted in the United States on DigitalOcean infrastructure. --- ## Who Has Access | Role | Access Level | |------|-------------| | **You** | Your own progress, grades, and profile | | **Course instructor** | Roster, progress, and grades for all enrolled students (for legitimate educational purposes) | | **Teaching assistants** | Same as instructor, if assigned by the instructor | | **PocketBase admin** | Technical access to the database for maintenance (restricted to course staff) | No other individuals or organizations have access to your education records. Aggregate, anonymized statistics (class averages, completion rates) may be used for course improvement. --- ## Third-Party Services | Service | Role | What It Receives | |---------|------|-----------------| | **GitHub** | Authentication only | Confirmation that you logged in (GitHub does not receive your grades or progress) | | **DigitalOcean** | Infrastructure hosting | Stores the server that holds your data (subject to DigitalOcean's data processing terms) | | **Canvas (Instructure)** | Official gradebook | Your computed grades (covered by EWU's institutional agreement) | | **Discord** | Instructor notifications | Anonymized aggregate grading summaries only (no student names or identifiable information) | --- ## Data Retention - **During the course:** All data is retained for the duration of the academic term. - **After the course:** Progress data is retained for 12 months after the term ends for grade dispute resolution, then permanently deleted. - **Backups:** Server backups are retained for 30 days and then deleted. You may request early deletion of your data at any time by contacting the instructor (see below). --- ## Your Rights Under FERPA As a student at Eastern Washington University, you have the following rights under the Family Educational Rights and Privacy Act (20 U.S.C. 1232g): 1. **Right to inspect your records** — You may view all data the site holds about you by visiting your profile page or requesting a data export from the instructor. The instructor will respond within 45 days. 2. **Right to request amendment** — If you believe any record is inaccurate, you may request a correction by contacting the instructor. 3. **Right to consent to disclosure** — Your education records will not be disclosed to third parties without your consent, except as permitted by FERPA (e.g., to university officials with legitimate educational interest). 4. **Right to file a complaint** — If you believe your FERPA rights have been violated, you may file a complaint with the U.S. Department of Education: Family Policy Compliance Office U.S. Department of Education 400 Maryland Avenue, SW Washington, DC 20202 --- ## Opting Out You may choose not to sign in to the course website. In that case: - Your progress will be stored only in your browser's localStorage (not on the server). - Participation grades will be assessed through an alternative arrangement with the instructor. - Contact the instructor before the end of Week 1 to set up an alternative. --- ## Contact For questions about your data, to request a data export, or to request deletion: **Course Instructor** — Contact via Canvas messaging or office hours. --- *Last updated: March 2026*