Privacy policy

Updated September 20, 2026

PDSA Points is operated by the Pre-Dental Student Association at UCF to record club participation, calculate points and manage events.

Information we handle

Member names, enrollment and attendance records, submitted credit amounts, review decisions, point totals and honorary status.
Check-in photos when an event requests evidence, such as a shirt photo or receipt, plus upload information used to match the photo and detect duplicates.
Administrative notes and historical imported roster data, which may include email addresses or student identifiers. The member pages do not request an email address.
For leadership sign-in, Google account identity, verified email and basic profile information received by Supabase Auth. PDSA stores approved emails, assigned roles, account bindings and an audit of access changes separately from member records.

How information is used

Records support check-in review, points, honorary eligibility, event management, duplicate detection and access control. Google sign-in identifies leadership accounts; signing in alone does not grant access. PDSA Points requests basic identity access, not access to Gmail messages, Google Drive files or Google contacts.

What is public

The member portal has no login. Anyone who knows or searches a member's name can look up their category totals, total points, honorary status and current-year event attendance status. Club leaderboards, published requirements and announced events are also public.

The public pages do not show evidence photos, member email addresses, student identifiers, administrative notes or decline reasons.

Leadership access

Approved Officers and Directors can manage events and read the roster and attendance. Secretary/Admin accounts can change club records, review attendance, view and remove eligible evidence photos, and manage leadership access. Evidence photos are unavailable to Officer/Director accounts.

Hosting and sign-in providers

GitHub Pages hosts the website. Supabase provides the database, private photo storage and authentication. Google provides Google sign-in. These providers process information needed to deliver their services, including technical request information, under their own policies.

GitHub privacy statement, Supabase privacy policy, Google privacy policy

Browser storage

The site uses browser storage for leadership sessions and temporary sign-in and check-in state. Sign out after using a shared device. Google and hosting providers may use their own cookies or storage.

Retention and requests

Attendance and points remain part of club history. Removing leadership access does not automatically delete the identity or access audit. Reviewed evidence photos are eligible for manual removal according to the configured retention window; photos are not automatically deleted on a timer. Database backups may retain earlier copies.

For questions, corrections or deletion requests, email pdsa.ucf@gmail.com. Identify the record or account involved without sending passwords, sign-in codes or unnecessary sensitive documents. Club administrators will review the request against the records the club needs to maintain.

Changes

Updates to this policy will appear here with a revised date.