Privacy Policy

This policy supplements the district's overarching privacy policy and explains how the district's central authentication service collects, uses, retains, and protects personal and authentication‑related information. For the full district privacy policy, please refer to the District Privacy Policy.

Last updated: November 2026

Information Collected

We collect only the minimum data necessary to authenticate users and maintain service security:

Authentication Data
  • Timestamps of sign‑in and sign‑out events
  • IP addresses and approximate geolocation
  • Browser / user‑agent information
  • Authentication method used (password, passkey, Windows SSO)
Account Identifiers
  • Username / SAM account name
  • Subject identifier (SID, UPN, or email)
  • Client application identifiers
  • FIDO2 credential metadata (public keys, AAGUID)
Purpose & Use

Data collected by this service is used exclusively to:

Authenticate users and enable single sign‑on across approved applications
Detect, investigate, and respond to security incidents
Meet operational, compliance, and audit requirements
Improve service reliability and user experience

Data is never sold, shared with third parties for marketing purposes, or used beyond the scope described above.

Data Retention

Authentication and audit logs are retained in accordance with district retention policies. Administrators may remove or archive logs through the administrative interface. Retention periods are balanced between operational needs, security investigation requirements, and privacy considerations. Expired or unnecessary data is purged on a regular schedule.

Security Controls
Encryption in Transit
TLS required for all communications
Access Restriction
Logs and admin functions limited to authorized staff
Secret Management
Secrets are hashed, salted, and rotated periodically
Your Rights

As a user of this service, you may:

  • Review your own recent sign-in activity from the Recent Sign-Ins page
  • Manage your registered passkeys from your Profile
  • Request data access or correction by contacting the Help Desk
  • Report suspected account compromise or unauthorized access immediately
Questions or Concerns?

For privacy or data questions, contact the Help Desk at help_desk@gfps.k12.mt.us. You can also reach the Help Desk by phone at 7393.

Back to Home