Privacy policy

What we deliberately do NOT collect

Keystone does not ask for, receive, or store student names, student numbers, grades, dates of birth, contact details, parent details, or any other record about a person at your school. Your member list stays in your own systems. We never see it.

What we do store

• The links, categories and settings you create.
• Your access rules. A rule is either an email domain, which is text and not a person, or a specific email address stored only as a one-way hash that cannot be turned back into the address by anyone, including us.
• One business-contact email for the account, so we can send your invoice and reach you. That is a customer record, not a member of your school.
• Which links are opened, so we can show you what your school uses. We count opens per link and never record who opened them. There is no identifier on these records at all, not even a hash, so no individual's activity exists in the first place.

Sign-in

People sign in with a one-time code sent to their email. We check that the address is allowed by your rules; we do not store it. The session is a signed cookie that holds no personal data beyond the address the person themselves typed.

Who we share it with

Nobody. Keystone runs on Cloudflare (hosting, database and storage) and sends email through Google Workspace on our behalf. We do not sell data and we do not use it for advertising.

Your rights

Because we hold no roster, there is no personal record of a student or staff member to access, correct or erase. You can export your configuration at any time from inside Keystone. To have everything deleted permanently, ask us and we do it.

Children

Keystone is a directory of links. It does not collect information from children, and student sign-in only ever confirms that an address is on your allow-list.

Contact

Who we are

Keystone is provided by SMCI Media LLC, a Florida limited liability company, trading as KiwiOrange Solutions. SMCI Media LLC is the data controller for your account contact details and the processor for anything covered by our data processing terms.

Questions about privacy go to the founder: contact form.