Security & Privacy

{warning} If you become aware of a security issue with The Conference Scheduler, please email us at security@theconferencescheduler.com so we can take action before you make a public disclosure.

About the Site

The Conference Scheduler uses CloudFlare for DNS management and DDoS protection. All web traffic is encrypted with a TLS certificate from LetsEncrypt. Database backups are taken hourly, encrypted, and stored with AWS.

The site is hosted on DigitalOcean droplets. Server software is regularly updated, with a priority focus on the timely application security patches.

Third Party Services & Information Sharing

Simply put, we are not in the business of sharing customer information without explicit consent.

That said, the site does use a few third party services for things like improving the site's appearance and managing delivery of transactional emails and SMS notifications.

Postmark for transactional email delivery
Nexmo for SMS delivery
Google Fonts for web fonts
Font Awesome for icons
Bugsnag for error reporting
Twilio Video for P2P virtual conferences

User information is shared with these services only insofar as is necessary for The Conference Scheduler to function as intended. For example, an email will be sent through Postmark to a user subscribed to the email notification channel whenever they reserve a new conference, confirming the reservation. The email message may contain:

The name of your school
Your name
The guardian's name
The child's name
The details of the conference (time, date, & location)

You can opt out of all SMS notifications and all but absolutely necessary transactional emails by modifying the list of notification channels you are subscribed to within your profile.

Analytics

The site uses Fathom (Community Edition) to track page views. From their README.md:

{quote} Fathom Analytics is a simpler and more privacy-focused alternative to Google Analytics … Fathom respects the privacy of your users and does not collect any personally identifiable information

All page views are tracked anonymously and stored locally (tracking data is not sent or backed up at a 3rd party).