Privacy policy
Last updated:
StudentHPC is a Colorado 501(c)(3) nonprofit. This policy describes what personal information we collect through this website and the allocation application, how we process it, and your rights regarding your data.
1. Information we collect
Educational requirement. To apply for an allocation, you must use a valid
student .edu email address, which we use to verify your active student status.
When you submit an allocation application, we collect the following information:
- Your name and
.eduemail address - Your institution
- Your research title and a summary of the workload you intend to run
- Your faculty advisor or Principal Investigator’s (PI) name and email address
- The computational resources you are requesting (node count, wall time, and software stack)
- An optional proposal PDF (if attached)
Third-party personal data. By providing your faculty advisor’s or PI’s name and email, you confirm you have the right to share their information with us. This data is used exclusively to verify your academic standing and research proposal.
Automated security data. You agree to provide accurate information. To protect our infrastructure, we also process your IP address to enforce a submission rate limit, preventing automated abuse and spam submissions.
2. How we process and share your data
- No tracking or selling. We do not track your browsing habits, run behavioral analytics, or monitor your activity outside of basic authentication. We will never sell, lease, or share your name, email, or account data with any advertisers or unauthorized third parties.
- Trusted service providers. Your information is strictly used to run the StudentHPC platform and manage cluster allocations. To facilitate this, your application data is processed by trusted third-party service providers acting on our behalf (e.g., written to Google Sheets and routed via Google Workspace). These providers act strictly as data processors and are not permitted to use your data for their own commercial purposes.
3. Data retention and deletion
Application data. Application data submitted to our Google Sheets processing queue is strictly temporary. Once your allocation application is either approved or denied, your submission data is immediately deleted from the queue. Additionally, any pending application data is automatically deleted after exactly 21 calendar days (not business days) from the date of submission, regardless of its status.
Account data. If your application is approved, the data strictly necessary to provision and maintain your account is retained on the StudentHPC cluster only for as long as your allocation remains active.
Your rights. You have the right to know what personal data we hold about you, request corrections to inaccuracies, or request the complete deletion of your information from our systems. To initiate a review or deletion request, please contact us using the email provided below.
4. State privacy disclosures (CPA, CCPA & CalOPPA)
As a Colorado-based nonprofit organization, we align our privacy practices with the principles of the Colorado Privacy Act (CPA), as well as acknowledging user rights outlined in the California Consumer Privacy Act (CCPA/CPRA) and CalOPPA:
- Your data rights. Users from jurisdictions with these privacy frameworks have the right to access, correct, and delete their data, as well as the right to non-discrimination for exercising these rights.
- Do Not Track (DNT) signals. Our website does not alter its behavior or respond to browser “Do Not Track” signals. Because we inherently do not track users, a DNT signal would not change anything about how this site behaves.
- Third-party tracking. We strictly prohibit third-party companies from conducting behavioral tracking of users anywhere on our service.
5. Cookies
This site sets exactly one cookie: a session cookie carrying a security token that prevents Cross-Site Request Forgery (CSRF) and stops other websites from submitting the application form on your behalf. It is strictly necessary, contains no personal identifiers, and expires immediately when you close your browser.
There are no analytics cookies, no advertising cookies, and no third-party cookies of any kind — which is why this site does not display a cookie consent banner. Fonts and stylesheets are served locally from our own domain, ensuring no outside company receives your IP address merely because you visited.