Privacy policy

Information we collect

This site collects very little. Visitors can read every public page, including the calendar and gallery, without submitting any personal information and without creating an account.

Staff who manage the calendar and gallery sign in with a username and password. We store that username, a one way cryptographic hash of the password, and an assigned role. We never store passwords in a readable form.

Cookies

When a staff member signs in, we set one cookie that holds a signed session token. It is marked HttpOnly and SameSite, so it cannot be read by scripts in the browser and is not sent with requests from other sites. It expires after twelve hours or when the user signs out.

We do not use advertising cookies, third party trackers or analytics profiling on this site.

Photographs of students

Photographs published in the gallery are posted by orchestra staff. We do not tag students by name in image captions. Families who want a photograph removed can email the director and it will be taken down.

Photo and media consent follows School Town of Munster policy. Direct any district level questions to the district office.

How information is used

Sign in information is used only to confirm that the person editing the calendar or gallery is authorized to do so. Uploaded images and event details are used to publish this site.

We do not sell, rent or trade any information collected through this site, and we do not share it except where required by law.

Links to other sites

This site links to outside organizations such as the Indiana State School Music Association, the Northwest Indiana Symphony, the Chicago Youth Symphony Orchestras and the district instrument partner. Once you follow a link, that organization's own privacy policy applies. We are not responsible for content or practices on sites we do not operate.

Security

Traffic to this site is encrypted in transit. Administrative pages require a valid session, sign in attempts are rate limited, and uploads are restricted to image files under a fixed size limit. No system is perfectly secure, so we review these protections as the site changes.

Children's privacy

This site is not designed to collect personal information from children. Only authorized staff accounts can submit anything to the site, and there are no public forms, comments or sign up fields.

Changes to this policy

If this policy changes, the revised version will be posted on this page. Continued use of the site after a change means the updated policy applies.