Privacy practices with clear boundaries.

1. Information the current service handles

• Sign-in data: none at present. Student sign-in is switched off and stores nothing; when it is on, it keeps the normalized @bc.edu address and sign-in time in this browser.
• Planning data: courses, sections, watchlists, preferences, and schedules selected in the browser.
• Community data: ratings, reviews, reports, appeals, or profile details submitted through future enabled features.
• Job alert address: an @bc.edu email address left on the on-campus jobs page, if you choose to, and the filters you pick for it. It is confirmed by email first: nothing but the confirmation email is sent to an address until its link is followed. The link expires after 24 hours, and an address that is never confirmed is deleted at the next cleanup of the list after that; cleanups run when someone next submits an address on the jobs page, not on a fixed timer. Every digest carries a one-click unsubscribe link, and unsubscribing deletes the address. An address is also deleted automatically when Amazon's email service reports a permanent bounce or a spam complaint; Amazon also keeps it on the suppression list of the site's Amazon account so it is not mailed again. It is never sold or used for anything else, and it is not given to Boston College. The outside services that handle it are the site's host, Microsoft Azure, and the service that delivers the email, Amazon SES, which also sends bounce and complaint notices back through Amazon's notification service.
• Job alert sign-up hashes: each sign-up attempt records a salted hash of the address and of the network address it came from, used only to limit repeated sign-ups (five attempts an hour from one network, three a day for one address); for an address outside @bc.edu only the network hash is recorded. A hash is deleted at the first cleanup after it is two days old.
• Feedback: what you write in the Contact form, the topic, the page you sent it from, an email address only if you give one, and a salted hash of the network address it came from. It is stored in the site's own database, separate from the course data, and read only by the site's developer in a private portal. It is never published or sold, and it is shared only as described under Service providers and disclosure (for example, the site's host stores that database). A message is kept until it has been dealt with. Once it has been marked resolved and left unchanged for 180 days, it is deleted the next time the developer opens the inbox; the developer may also delete it sooner. The hashed network address is used only to limit abuse: no more than five messages an hour from one network, and a daily limit for the whole site. A hash is deleted the next time anyone sends a message after it is two days old. The site never replies on its own; the developer may follow up by email only if you left an address.
• Technical data: browser, device, IP, request, security, and error information created by hosting infrastructure.
• Communications: privacy, security, accessibility, correction, copyright, and other requests sent through the Contact form.

2. Information Linden Study does not request

Linden Study does not ask for or intentionally collect a BC password, Duo or other MFA code, Eagle ID, portal cookie, SSO token, authorization header, transcript, payment credential, or another person's private information.

Linden Study's own email-format sign-in, currently switched off, is separate from Boston College SSO. It does not prove that a person controls the address or is currently affiliated with Boston College.

3. How information is used

Information may be used to provide search and planning features, remember local prototype access when sign-in is switched on, maintain preferences, answer requests, prevent abuse, measure reliability, debug problems, comply with law, and develop the service.

Linden Study will not use this information to make an official academic, admissions, employment, or disciplinary decision.

4. Browser storage, cookies, and analytics

Student sign-in is currently switched off and stores nothing. When it is switched on, the mock sign-in stores a versioned record containing the normalized email address and sign-in time in browser localStorage, and the component does not itself transmit that address to a Linden Study server. Signing out or clearing site storage removes the local record.

Hosting infrastructure may use essential cookies, operational logs, and security controls. No analytics or advertising script is in use. The site's code can load one analytics script if the operator configures it; any analytics, advertising, or embedded-media tool will be identified here before activation, with consent requested where required.

5. Service providers and disclosure

The service providers listed below process information on Linden Study's behalf.

Professor photos are not served by Linden Study: your browser loads them directly from Boston College's website (www.bc.edu), which is not a service provider acting for Linden Study. Like any web server, it receives your IP address and browser details, and learns that the request came from Linden Study, when a page shows one of those photos.

Information may also be disclosed when you direct Linden Study to share it; to protect people and the service; during a properly structured business transfer; or when legally required.

The current prototype does not sell personal information or use it for targeted advertising. Vendor processing should be minimized and documented rather than described as if no sharing occurs.

• Microsoft Azure App Service hosts the site and its databases, including feedback messages and job-alert addresses.
• Amazon Simple Email Service (region us-east-2) sends the job-alert confirmation and digest emails, so it receives the address each one goes to, and reports bounces and spam complaints back to the site through Amazon's notification service. After a permanent bounce or a spam complaint, Amazon keeps the address on the suppression list of the site's Amazon account so it is not mailed again.
• Google Fonts (fonts.googleapis.com and fonts.gstatic.com) serves the site's typefaces. Like any web server, it receives your IP address and browser details when a page loads them.

6. Retention and deletion

Student sign-in stores nothing while it is switched off; when it is on, its local record remains until sign-out or browser storage is cleared. A job-alert address is kept until you unsubscribe or until a permanent bounce or a spam complaint removes it; after a bounce or complaint, Amazon also keeps it on the site's suppression list so it is not mailed again. An address that is never confirmed is deleted at the first cleanup after its link expires (24 hours), and the sign-up hashes at the first cleanup after they are two days old; cleanups run when someone next submits an address on the jobs page. A feedback message is kept until it has been dealt with; once it has been resolved and left unchanged for 180 days, it is deleted the next time the developer opens the inbox. Its network-address hash is deleted the next time anyone sends a message after the hash is two days old. Retention periods for server-side accounts will be published before they launch.

For other information, the intended baseline is deletion from active systems within 30 days of a verified request, ordinary operational logs for up to 30 days, security logs for up to 90 days, and backup purge within 90 days, unless a shorter requirement or documented legal or security hold applies. Backups of the site's databases can hold copies of job-alert addresses and feedback messages after they are deleted from the live database; the same intended 90-day backup purge applies to those copies.

7. Security and user choices

Linden Study intends to use HTTPS, access controls, redacted logs, rate limiting, dependency updates, and an incident-response process. No online service can promise absolute security.

Depending on applicable law, a user may request access, correction, deletion, or export of personal data, or appeal a denied request. Send a request through the Contact form with the topic Privacy request, and say what it is about and, if it concerns a job-alert address or a message you sent, the email address involved. Leave an email address in the form if you would like a reply; the site never replies on its own. Do not send a password, MFA code, or government identifier.

Report a security problem through the same form with the topic Bug or broken page, and start the message with “Security”. Describe what you found and how to reproduce it, but do not include exploit details or anyone's data.

The operator's mailing address has not been published yet.

8. Age, geography, and education records

The current prototype is intended for people age 18 or older in the United States and is not directed to children under 13. Broader access requires a separate legal and product review.

Linden Study is not acting as a Boston College school official unless a future written agreement expressly establishes that relationship. Users should not upload official education records.