Privacy Policy

Who this policy covers

This website is operated by the OH-20221 Air Force Junior Reserve Officer Training Corps (AFJROTC) unit at Logan High School, part of the Logan-Hocking Local School District. It has two parts: a public site that anyone can visit, and a password-protected cadet portal for enrolled cadets and instructor staff.

Because we are a public school program, the way we handle student information is governed primarily by the Family Educational Rights and Privacy Act (FERPA) and by the Logan-Hocking Local School District’s own board policies. Where this notice and a district policy differ, the district policy controls.

Information we collect

When you browse the public site

You do not need an account to read the public pages. Our hosting and security providers automatically record limited technical information for every request, including your IP address, the page requested, the date and time, and your browser and device type. This is used to deliver the site, keep it available, and detect abuse.

When you request a cadet portal account

We ask for, and store:

• Your full name
• Your email address
• A password, which is stored only as a one-way cryptographic hash
• Your confirmation that you are 13 or older

New accounts are created in a pending state and cannot access the portal until an instructor reviews and approves them.

Inside the cadet portal

For enrolled cadets, the portal holds records related to participation in the AFJROTC program, which may include rank and position, flight assignment, grade level, event attendance and service hours, uniform and equipment issue, promotion test results, evaluations, and staff journal submissions. We also keep an activity log of significant staff actions for accountability.

Student records and FERPA

Records in the cadet portal that are directly related to a student and maintained by the school are education records under FERPA (20 U.S.C. § 1232g; 34 CFR Part 99). We do not sell education records, use them for advertising, or disclose them except as FERPA permits — for example, to school officials with a legitimate educational interest, or with written consent.

Parents, and students who are 18 or older (“eligible students”), have the right to:

• Inspect and review the student’s education records
• Request correction of records believed to be inaccurate or misleading
• Consent to disclosures of personally identifiable information, except where FERPA authorizes disclosure without consent
• File a complaint with the U.S. Department of Education’s Student Privacy Policy Office

Ohio law additionally restricts release of student personally identifiable information (Ohio Rev. Code § 3319.321). To exercise any of these rights, contact the instructor staff listed below or the district records custodian.

Directory information and opt-out

The public Cadet Roster page lists cadet name, rank, grade level, flight, and position. Photographs of cadets appear in the public Gallery. We publish these as directory information, which FERPA allows a school to disclose without consent — but only if families are given notice and a reasonable chance to refuse (34 CFR § 99.37).

If your family already filed a directory-information opt-out with the Logan-Hocking Local School District, that opt-out applies here too — but please tell the instructor staff so we can apply it to this site promptly.

Children under 13 (COPPA)

This site is intended for high school students, instructor staff, and families. We do not knowingly create portal accounts for children under 13, and account requests require the applicant to confirm they are 13 or older. If we learn that we have collected personal information from a child under 13 without the school-authorized consent required by the Children’s Online Privacy Protection Act, we will delete it. If you believe a child under 13 has created an account, contact us using the details below.

How we use information

• To operate the public site and the cadet portal
• To authenticate members and control who can see or edit what
• To administer the AFJROTC program — attendance, service hours, promotions, inventory, and evaluations
• To communicate unit news, schedules, and announcements
• To secure the site against automated abuse, credential-stuffing, and spam
• To meet legal, audit, and district record-keeping obligations

We do not sell personal information, share it with advertisers, use it to build advertising profiles, or use automated decision-making that produces legal effects.

Who we share information with

Beyond disclosures permitted by FERPA, information is processed by the service providers we rely on to run the site. Each acts on our instructions:

Supabase

PostgreSQL database hosting — stores all site and portal content. Data involved: account details, cadet records, and site content.

Cloudflare

Application hosting, network security, and Turnstile bot verification. Data involved: ip address, request metadata, and browser characteristics.

Upstash

Rate-limit counters that protect sign-in and submission endpoints from abuse. Data involved: a hashed identifier derived from ip address, plus request counts.

Google (Drive & Fonts)

Photo gallery image hosting and web font delivery. Data involved: ip address and browser characteristics when images or fonts load.

We may also disclose information where required by law, court order, or public records obligations, or to protect the safety of students and staff.

Cookies and session storage

This site uses strictly necessary cookies only. We do not use advertising, analytics, or cross-site tracking cookies, so no consent banner is required.

• Session cookie. Set when you sign in, so the site knows you are logged in. It is removed when you sign out or when the session expires.
• CSRF token cookie. Set by the sign-in system to prevent cross-site request forgery.
• Cloudflare Turnstile. Used on the sign-in and account request forms to tell humans from bots. Turnstile is designed as a privacy-preserving alternative to CAPTCHA and is not used to track you across sites.

Because these cookies are essential to signing in, blocking them will prevent the cadet portal from working. Public pages remain readable without them.

How long we keep information

Education records are retained and disposed of according to the Logan-Hocking Local School District’s records retention schedule and Ohio public records law. Account records for cadets who leave the program are deactivated and then removed in line with that schedule. Rate-limit counters expire automatically within minutes to hours. Security and request logs held by our providers are kept for a short period and then deleted.

How we protect information

All traffic is encrypted in transit with HTTPS. Passwords are stored only as salted one-way hashes, never in readable form. Access inside the portal is limited by role, so cadets see only what their position requires. Sign-in and submission endpoints are rate limited and protected by bot verification. New accounts require staff approval before any access is granted.

No system is perfectly secure. If you believe an account or record has been exposed, contact the instructor staff immediately.

Your rights and choices

• Ask to see, correct, or discuss any record we hold about a cadet
• Opt out of the public roster and public photographs at any time
• Ask that a specific photograph be removed from the gallery
• Ask us to deactivate a portal account
• File a FERPA complaint with the Student Privacy Policy Office, U.S. Department of Education, 400 Maryland Avenue SW, Washington, DC 20202

Changes to this policy

We will update this page when our practices change and revise the “last updated” date above. Material changes affecting student records will also be communicated through the unit’s normal channels.

How to contact us

OH-20221 AFJROTC
Logan High School
14470 State Route 328
Logan, OH 43138

Maj Lance Roberts, SASI — lroberts@lhsd.k12.oh.us
MSgt Jeffery George, ASI — jgeorge@lhsd.k12.oh.us