Cedar Valley School District ("District," "we," "our," or "us") is committed to respecting user privacy, protecting information, and maintaining a secure online environment. This Privacy Policy explains how CVSD Go collects, uses, processes, shares, stores, and protects information when users access its public link directory, shortened URL redirection services, and authenticated staff administration tools.
CVSD Go is an official resource management platform affiliated with Cedar Valley School District, a virtual educational organization operating within the Roblox platform. The Service is designed to provide convenient access to District resources while minimizing the collection of user information.
By accessing or using CVSD Go, you acknowledge the information practices described in this Privacy Policy. We encourage all users to review this policy to understand how information is handled and what privacy protections are available.
1. Information We Collect
CVSD Go is designed to collect only information reasonably necessary to operate, maintain, secure, and improve its services. The types of information collected may vary depending on whether you access public resources or use authenticated administrative features.
Depending on your interaction with CVSD Go, we may collect:
- Account identifiers: Information associated with authorized staff accounts, such as Roblox usernames, Discord usernames, account identifiers, display names, and assigned administrative roles.
- Administrative metadata: Records relating to account permissions, role assignments, moderation actions, administrative changes, authentication events, and associated timestamps.
- Link records and operational information: Shortened URL identifiers, destination URLs, link descriptions, folder assignments, scheduling configurations, access restrictions, and publication status.
- Technical usage information: Information generated through normal platform operations, which may include IP addresses, browser types, device information, timestamps, requested URLs, error reports, and security-related logs.
- Authentication and session information: Session identifiers, authentication tokens, and other technical information necessary to maintain secure access to restricted features.
- Support submissions and communications: Information voluntarily provided through approved support channels, including inquiries, technical issue reports, feedback, and related correspondence.
- User preferences: Limited settings or preferences stored through cookies or similar technologies when supported by the platform.
CVSD Go does not intentionally request or collect real-world student records, home addresses, telephone numbers, government-issued identification numbers, financial information, or other sensitive personal information.
Users should avoid submitting personal or confidential information through public link fields, support forms, or other areas where such information is not necessary.
2. How We Use Information
Information collected through CVSD Go is used exclusively for legitimate operational, administrative, security, and service-related purposes.
We may process information to:
- Provide and maintain public directory search, link organization, and secure redirection functionality.
- Authenticate authorized staff members and manage account permissions, administrative roles, and access restrictions.
- Create, update, organize, schedule, restrict, and remove links and associated directory resources.
- Detect suspicious activity, prevent unauthorized access, investigate misuse, and maintain platform security.
- Monitor system performance, identify technical issues, and improve service reliability and accessibility.
- Process support requests, respond to inquiries, and address reported technical or administrative concerns.
- Maintain administrative records and audit logs necessary for accountability, troubleshooting, and security reviews.
- Enforce applicable District policies, platform requirements, and these privacy and service terms.
- Comply with applicable legal obligations or respond to valid requests from authorized authorities.
Information will not be used for unrelated commercial purposes, targeted advertising, or the creation of behavioral advertising profiles.
The District seeks to limit information processing to what is reasonably necessary for the stated purpose.
3. Legal Basis and Educational Context
CVSD Go operates as a resource management and administrative service for Cedar Valley School District, a virtual educational organization within Roblox.
Information processing is conducted to support legitimate District operations, maintain platform security, provide requested services, and fulfill applicable legal or contractual obligations.
Where required by applicable law, information processing may rely on user consent, legitimate interests, contractual necessity, or another recognized legal basis.
Because Cedar Valley School District operates within a virtual environment, CVSD Go is not intended to function as a traditional student information system or maintain official real-world educational records.
The District does not represent that its virtual operations establish the same legal status, authority, or responsibilities as a government-operated educational institution.
Nothing in this policy limits any privacy rights or protections that may apply under relevant laws or platform requirements.
4. Cookies and Similar Technologies
CVSD Go may use cookies, browser local storage, session tokens, and similar technologies to provide essential website functionality, maintain secure authentication, and remember certain user preferences.
These technologies help ensure that the platform operates efficiently and that authorized administrative features remain protected.
Types of Cookies
- Strictly necessary cookies: These cookies are required for essential website functions, including authentication, session management, security protections, and access to restricted administrative features. They are necessary for the operation of certain services and are not controlled through the optional cookie preference setting.
- Optional cookies: These cookies may be used to remember nonessential preferences, support aggregated usage analysis, and improve platform performance or reliability. They are enabled only when permitted by the user's cookie preferences and applicable requirements.
CVSD Go does not use cookies for targeted advertising, cross-site behavioral tracking, or the sale of user information to advertisers.
Managing Your Cookie Preferences
When users first access CVSD Go, a cookie consent banner may appear, allowing them to choose whether optional cookies may be enabled.
Available choices include:
- Accept: Enables optional cookies in addition to strictly necessary cookies.
- Decline: Disables optional cookies while allowing strictly necessary cookies to continue supporting core functionality.
Declining optional cookies will not prevent users from accessing the public link directory or standard redirection services.
However, disabling strictly necessary cookies or related browser storage may interfere with authentication, session management, or other essential platform functions.
Users may also manage or delete stored cookies through their browser settings. Where supported, cookie preferences may be updated through the website's privacy or cookie settings.
For additional information about the retention of information, refer to Section 6 (Data Retention).
5. Sharing and Disclosure
Cedar Valley School District does not sell, rent, or trade personal information to advertisers, data brokers, or other third parties for commercial marketing purposes.
Information may be shared only when reasonably necessary to operate CVSD Go, provide requested services, maintain security, or comply with applicable requirements.
Information may be disclosed to:
- Authorized District personnel: Staff members with appropriate permissions who require access to perform legitimate administrative, technical, moderation, or security responsibilities.
- Approved service providers: Third-party providers supporting hosting, authentication, infrastructure, security, or other essential platform functions.
- Platform integrations: Authorized services, including Roblox- or Discord-related integrations, when necessary for account verification, role management, or approved operational functions.
- Legal or regulatory authorities: Appropriate authorities when disclosure is required by applicable law, valid legal process, or another legally binding obligation.
- Security and incident response personnel: Authorized individuals or providers assisting with the investigation, prevention, or resolution of security incidents.
Where appropriate, information sharing will be subject to reasonable confidentiality, access control, and security safeguards.
The District does not authorize third-party service providers to use information received through CVSD Go for unrelated advertising or independent commercial purposes.
6. Data Retention
CVSD Go retains information only for as long as reasonably necessary to fulfill legitimate operational, administrative, security, and legal purposes.
Retention periods may vary depending on the type of information, its intended use, applicable requirements, and the need to maintain accurate administrative or security records.
Examples of information that may be retained include:
- Account and role information: Maintained while an account remains authorized or while related records are reasonably necessary for administrative or security purposes.
- Link and directory records: Retained while resources remain active or as necessary to support platform management, auditing, and restoration.
- Administrative activity logs: Retained for an appropriate period to support accountability, troubleshooting, security investigations, and policy enforcement.
- Technical and security logs: Retained for a limited period consistent with legitimate security, operational, and incident response requirements.
- Support communications: Retained as necessary to address inquiries, document resolutions, and maintain relevant operational records.
- Cookie and session information: Retained according to the applicable cookie configuration, session duration, or browser storage settings.
When information is no longer reasonably necessary, the District may delete, anonymize, or securely archive it, subject to applicable retention obligations and technical limitations.
Deletion from active systems may not immediately remove information from existing backups or security archives. Such information may remain until the applicable backup retention period expires.
7. Security Measures
The District implements reasonable administrative, technical, and organizational safeguards designed to protect information processed through CVSD Go against unauthorized access, disclosure, alteration, loss, or misuse.
Security measures may include:
- Role-based access controls that restrict administrative functionality to authorized personnel.
- Authentication and session management controls intended to protect staff accounts.
- Technical logging and monitoring to identify suspicious activity or potential security incidents.
- Secure communication protocols and infrastructure protections where supported.
- Administrative auditing and permission reviews to maintain appropriate access restrictions.
- Software maintenance, security updates, and corrective measures intended to address identified vulnerabilities.
- Access limitations designed to reduce unnecessary exposure of administrative information.
Although the District makes reasonable efforts to protect its systems, no website, network, or online service can be guaranteed completely secure.
Users are responsible for protecting their authentication credentials and promptly reporting suspected unauthorized access or security concerns.
The District may review and update security practices as technology, operational requirements, and potential threats evolve.
8. Student Data and Virtual Platform Information
CVSD Go is affiliated with Cedar Valley School District, a virtual educational organization operating within Roblox. The District's virtual operations are separate from those of a traditional public school district.
CVSD Go is not designed to collect, store, or maintain official real-world student records, academic transcripts, grades, home addresses, government identification numbers, or other sensitive educational information.
The information intentionally requested through the platform is generally limited to:
- Roblox usernames or user identifiers used to recognize individuals within the virtual environment.
- Discord usernames or account identifiers used for approved communication, authentication, or verification purposes.
- Role assignments, staff permissions, and other information necessary for administrative access or organizational management.
- Limited technical and security information generated through normal website operations.
Roblox and Discord usernames, identifiers, and associated account information may still constitute personal information under applicable privacy laws, even when they do not directly identify an individual's real-world identity.
Users should not submit real names, personal contact information, passwords, financial information, or other sensitive details unless specifically required through an authorized and appropriate process.
CVSD Go is not intended to independently collect information from children in violation of applicable child privacy laws or platform requirements.
Where required, the District will comply with applicable age restrictions, consent requirements, and privacy protections governing the collection or processing of information associated with minors.
The District does not intentionally use information collected through CVSD Go to identify the real-world identities of Roblox or Discord users.
9. Third-Party Links and Services
CVSD Go provides shortened links and directory listings that may redirect users to websites, applications, documents, and services operated by third parties.
Once a user leaves CVSD Go, the privacy practices and information handling procedures of the destination service generally apply.
The District does not directly control the collection, processing, retention, disclosure, or security practices of independently operated third-party destinations.
External services may collect information through their own cookies, authentication systems, analytics tools, or other technologies.
Users are encouraged to review the privacy notices and terms of service of external destinations before submitting personal or sensitive information.
The inclusion of a third-party link does not necessarily indicate that the District endorses the destination's privacy practices or assumes responsibility for its independent operations.
10. Your Rights and Requests
Depending on applicable privacy laws and the nature of the information processed, users may have certain rights concerning information associated with their accounts or interactions with CVSD Go.
These rights may include the ability to:
- Request access: Ask whether the District maintains personal information associated with an identifiable account and request access where legally applicable.
- Request correction: Seek correction of inaccurate or outdated account information maintained through the platform.
- Request deletion: Request deletion of eligible personal information, subject to applicable retention, security, and operational requirements.
- Request restriction: Ask the District to restrict certain processing activities when supported by applicable law.
- Withdraw consent: Withdraw consent for optional information processing when consent is the applicable legal basis.
- Manage cookie preferences: Accept, decline, or modify optional cookie settings through available website controls.
The District may require reasonable verification of account ownership or identity before processing requests involving protected information.
Certain requests may be limited or denied when information must be retained for legitimate security purposes, legal obligations, administrative accountability, or other lawful reasons.
The District will review requests and respond in accordance with applicable legal requirements and established procedures.
11. Contact
Questions, privacy concerns, information requests, or reports of suspected data security incidents may be directed to Cedar Valley School District at gosupport@cvsd.live.
Users contacting the District should provide a clear description of their inquiry or concern and sufficient non-sensitive information to assist with its review.
For security reasons, users should not include passwords, authentication tokens, or unnecessary personal information in email communications.
The District will review submitted inquiries and respond as appropriate in accordance with applicable requirements and administrative procedures.
12. Policy Updates
The District may periodically update this Privacy Policy to reflect changes in CVSD Go functionality, information handling practices, security measures, third-party integrations, applicable laws, or organizational requirements.
Material updates will be published on this page with a revised effective date. When appropriate, additional notice may be provided through official District communication channels.
Users are encouraged to review this Privacy Policy periodically to remain informed about how information is collected, processed, and protected.
Any changes to this policy will apply from the stated effective date, subject to applicable legal requirements.
13. Data Minimization and Purpose Limitation
CVSD Go follows the principle of data minimization by seeking to collect and process only the information reasonably necessary to provide its intended functionality.
The District aims to avoid collecting unnecessary personal information and to limit access to information based on legitimate administrative or operational needs.
Information collected for a specific purpose will not be intentionally repurposed for unrelated activities without an appropriate legal basis or other required authorization.
Where practical, the District may use aggregated, anonymized, or otherwise limited information when identifying usage trends, evaluating platform performance, or improving service functionality.
Administrative personnel are expected to handle information responsibly and avoid unnecessary collection, duplication, disclosure, or retention of user information.
14. Data Breaches and Security Incidents
The District takes suspected unauthorized access, information exposure, and other security incidents seriously.
When a potential security incident is identified, the District may investigate the circumstances, assess the affected systems or information, and implement reasonable measures to contain and address the issue.
Depending on the nature of the incident, response measures may include:
- Temporarily restricting access to affected accounts, links, or administrative features.
- Reviewing relevant authentication records, technical logs, and administrative activity.
- Resetting compromised credentials or invalidating affected authentication sessions.
- Implementing security updates or additional protective controls.
- Notifying affected users or appropriate authorities when required by applicable law.
- Reviewing existing safeguards to reduce the likelihood of similar incidents.
The District will make reasonable efforts to address confirmed security concerns promptly and in accordance with applicable legal and operational requirements.
Users who suspect that their account or information has been compromised should report the matter to gosupport@cvsd.live as soon as possible.