Terms of Service

Last updated: April 16, 2026 • Version 2.0

Zero-Access Promise

HallPassTracker operates on a zero-access architecture. Student names and identifying information stay in your Google Drive and are never transmitted to or stored on our servers. Our server requests only the narrow drive.file scope, which limits access to files the HallPassTracker app creates in your Drive — we cannot read anything else in your Drive.

1. Acceptance of Terms

By accessing or using HallPassTracker, a service of Cranium Craze ("Service", "we," "us," or "our"), you agree to be bound by these Terms of Service ("Terms") and our Privacy Policy. If you disagree with any part of these terms, you may not access the Service.

2. Service Description

HallPassTracker is a digital hall pass management system designed for educational institutions. Our Service provides:

  • Anonymous Pass Tracking: Track physical pass usage without storing student identity
  • Zero-Access Architecture: Student data never stored on our servers
  • Secure Correlation: Optional student correlation via client-side processing (Premium)
  • Real-time Monitoring: Dashboard for teachers to monitor pass usage

3. User Accounts and Eligibility

3.1 Account Creation

To use HallPassTracker, you must:

  • Be at least 18 years of age
  • Be employed by or affiliated with an educational institution
  • Provide accurate, current, and complete account information
  • Maintain the security of your account credentials

3.2 Google Authentication

HallPassTracker uses Google OAuth for authentication. Signing up authorizes us to read your basic Google profile (email, name, avatar).

Premium accounts additionally require Google Drive access using the narrow drive.file scope. This scope grants HallPassTracker access to only files the app itself creates in your Drive (the HallPassTracker_Data folder and its contents); we cannot read anything else in your Drive. Student rosters, pass events, and any premium features that involve student data depend on this connection. Free accounts do not connect Drive and do not use premium student-aware features.

4. Privacy and Data Protection

Our Privacy Commitment

HallPassTracker is designed with privacy as a core principle. Student names and identifying information stay in your Google Drive and are never transmitted to or stored on our servers. This section of the Terms also serves as our Privacy Policy; it describes what we collect, how we use it, who we share it with, and your rights.

4.1 Data We DO NOT Collect

  • Student names or personally identifiable information
  • Student ID numbers or school records
  • Individual student behavior or disciplinary data
  • Detailed location tracking beyond pass events

4.2 Data We DO Collect

Anonymous Event Data (stored on our servers):

  • Pass ID numbers (not linked to student identity)
  • Timestamp of pass events (in/out)
  • Pass type (bathroom, nurse, office, library)
  • Duration of pass usage

Teacher Account Data:

  • Name, email, school affiliation
  • Account preferences and settings
  • Subscription and billing information
  • Usage statistics and analytics
  • For Premium accounts: a Google Drive refresh token, stored in our database and used exclusively to mint short-lived access tokens for your authenticated devices (dashboard and kiosks). This refresh token is scoped to drive.file, so it cannot be used to read anything in your Drive outside the files our app created.

4.3 Student Data Protection (Premium)

For Premium accounts, student rosters and pass-event records with student identifiers live in your Google Drive in a dedicated HallPassTracker_Data folder. These protections apply:

  • Scoped access: We request the drive.file OAuth scope, which limits our access to files the HallPassTracker app itself creates. We cannot read other files in your Drive.
  • Client-side correlation: Student names are joined with anonymous pass events only on your device, in your browser. Our server never receives or processes student names, IDs, or rosters.
  • Server-mediated token minting, not data access: Our server stores your Google Drive refresh token and uses it to issue short-lived access tokens to your signed-in devices. The server does not use those tokens to read your files; file contents flow directly between Google Drive and your browser.
  • Your control: You may disconnect Drive or delete the HallPassTracker_Data folder at any time. You may also revoke HallPassTracker's access entirely from your Google account permissions page.

What this is not: Prior versions of this service used client-side encryption with a user-chosen password. That mechanism was retired in Version 2.0 because the operational cost (lost-password recovery, kiosk provisioning, correlation accuracy) outweighed the benefit given that we already commit not to access student data on the server. The current model is scope-limited authorization plus a contractual commitment not to read your files — a standard software-vendor trust relationship, not a cryptographic guarantee.

4.4 Information Sharing

We do not sell, rent, or trade your information. We share it only in these limited circumstances:

  • With your consent. We share information only when you explicitly authorize us to do so.
  • Google. For account authentication and — for Premium accounts — Google Drive storage of your roster and pass events.
  • Payment processors. For subscription billing. These providers receive billing information but never see student data.
  • Infrastructure providers. For server hosting, databases, and email delivery. They handle anonymous pass events and teacher account information, not student PII.
  • Legal requirements. If compelled by law we may be required to disclose information we hold. Because of our zero-access architecture, we do not hold student PII to disclose — only anonymous pass events with no server-side correlation to individual students, plus teacher account data.

4.5 Data Security

  • Encryption in transit. All traffic between your devices and our servers is encrypted over HTTPS.
  • Scoped third-party access. Google Drive access is limited to the drive.file OAuth scope.
  • Access controls and monitoring. Internal access to production systems is restricted and monitored.
  • Ongoing maintenance. Security patches are applied regularly to server software and dependencies.

4.6 Your Rights and Choices

  • View and update your data. Your Settings page shows the account data we hold and lets you change profile information, preferences, and email subscriptions.
  • Delete your account. Email [email protected] to request deletion; we complete deletions within 30 days, except for billing records retained for legal compliance (see Section 10).
  • Export pass events. The Reports page (Premium) lets you download a CSV of your anonymous pass events at any time.
  • Revoke Drive access. You can revoke HallPassTracker's Google Drive access at any time from your Google account permissions page.

4.7 International Users

HallPassTracker is operated from the United States. If you use the Service from outside the US, your information will be transferred to and processed in the United States. The protections described in this Section apply regardless of location, but local regulations in your jurisdiction may not match those of the United States.

4.8 Children's Privacy

HallPassTracker is designed for teachers and educational staff who are adults. The Service tracks pass usage by students, who may be minors; because student names and identifiers never reach our servers, no personally identifiable information about students is collected, stored, or processed by HallPassTracker. Any student information associated with pass events lives exclusively in the account owner's Google Drive and is subject to that account owner's and institution's own policies.

5. Subscription Plans and Billing

5.1 Plan Types

Free Plan: Anonymous pass tracking with basic features

Premium Plan: Unlimited passes, student correlation, advanced reporting

5.2 Billing and Cancellation

  • Premium subscriptions are billed monthly or annually
  • You may cancel your subscription at any time
  • Upon cancellation, you retain access until the end of your billing period
  • No refunds for partial periods

6. Acceptable Use

You agree to use HallPassTracker only for legitimate educational purposes. You may not:

  • Use the Service for any unlawful purpose
  • Attempt to access other schools' or users' data
  • Reverse engineer or attempt to extract our source code
  • Interfere with or disrupt the Service
  • Share your account credentials with unauthorized persons

6.1 Zero-Access Architecture Compliance

Approved Student Correlation Method:

HallPassTracker provides one approved method for correlating student identity with pass events: the Premium tier's Google Drive correlation system. The roster and event files live in your Drive, under the drive.file scope, and the correlation between anonymous pass events and student names happens only in your browser. HallPassTracker servers never store, access, or transmit student PII.

Prohibition Against Circumventing Privacy Design:

You expressly agree not to attempt to subvert, circumvent, or compromise HallPassTracker's zero-access architecture through unauthorized methods. This includes, but is not limited to:

  • Creating passes for individual students: You may not create physical passes that correspond to specific students or contain student identifiers, as this would create server-side linkages between pass IDs and student identities
  • Encoding student information in pass data: You may not embed student names, IDs, or other personally identifiable information in pass IDs, pass types, or other system fields that are transmitted to or stored on our servers
  • Systematic correlation attempts: You may not use timing patterns, pass sequences, or other methods to create server-side linkages between pass events and student identities outside of the approved Premium Google Drive system
  • Data aggregation schemes: You may not attempt to correlate our anonymous event data with external student information systems in ways that would result in student PII being stored on or transmitted through our servers
  • Exploiting system features: You may not misuse legitimate system features (such as pass notes, descriptions, or any user-configurable fields) to store student-identifiable information on our servers

Architecture Integrity: The zero-access architecture has been carefully designed with specific technical safeguards to ensure student privacy compliance. Any attempt to circumvent these safeguards undermines the legal and technical foundations that protect student privacy and may expose your institution to compliance violations.

Enforcement: Violation of these privacy safeguards constitutes a material breach of these Terms. We reserve the right to immediately suspend or terminate accounts that compromise the zero-access architecture, as detected through automated monitoring, audit procedures, or reported violations. Such termination may occur without advance notice if necessary to protect student privacy and maintain architectural integrity.

7. FERPA Compliance

HallPassTracker is designed to comply with the Family Educational Rights and Privacy Act (FERPA). Our zero-access architecture ensures that:

  • No student educational records are stored on our servers
  • Student PII never leaves your control
  • You maintain full control over student data access and sharing
  • We cannot disclose student information because we don't have access to it

FERPA Compliance Disclaimer

FERPA is a complex federal law with requirements that depend on specific implementation details, institutional policies, and use cases. While HallPassTracker has been designed with FERPA compliance in mind and implements technical safeguards to support compliance, we cannot guarantee that your specific use of this service will meet all FERPA requirements for your institution.

You should not rely solely on our assertions regarding FERPA compliance. As an educator or administrator, you are ultimately responsible for ensuring your use of HallPassTracker complies with FERPA and any applicable state or local laws. We strongly recommend consulting with your school district's legal counsel, privacy officer, or compliance team before implementing this service to ensure it meets your institution's specific regulatory requirements.

8. Service Availability

We strive to maintain 99.9% uptime, but we do not guarantee uninterrupted service. We may temporarily suspend access for:

  • Scheduled maintenance
  • Emergency security updates
  • Technical difficulties beyond our control

9. Limitation of Liability

HallPassTracker is provided "as is" without warranties of any kind. TO THE MAXIMUM EXTENT PERMITTED BY LAW, OUR TOTAL LIABILITY TO YOU FOR ANY CLAIMS ARISING FROM OR RELATED TO THIS SERVICE SHALL NOT EXCEED THE GREATER OF: (A) THE TOTAL AMOUNT YOU PAID TO US IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM, OR (B) ONE HUNDRED DOLLARS ($100).

We are not liable for:

  • Data loss due to user error or equipment failure
  • Decisions made based on Service data
  • Indirect, incidental, or consequential damages
  • School policy violations or disciplinary actions
  • Any damages arising from third-party actions or services
  • Loss of profits, revenue, data, or business opportunities

10. Data Retention and Deletion

10.1 Anonymous Event Data

  • Retained for operational purposes and analytics
  • Automatically deleted after 7 years
  • Cannot be linked to individual students

10.2 Account Data

  • Deleted within 30 days of account closure
  • Backup copies deleted within 90 days
  • Billing records retained for legal compliance (7 years)

10.3 Student Data (Premium)

  • Stored securely in your Google Drive only
  • You control retention and deletion
  • We have no access to view or delete this data

11. Changes to Terms

We may update these Terms from time to time. When we make material changes:

  • We'll notify you via in-app notification
  • Continued use constitutes acceptance of new terms
  • You may terminate your account if you disagree with changes

12. Termination

Either party may terminate this agreement at any time. Upon termination:

  • Your access to the Service will cease immediately
  • Your account data will be deleted per our retention policy
  • Student data in your Google Drive remains under your control
  • Applicable provisions survive termination (privacy, data retention, limitation of liability)

13. Entire Agreement

These Terms of Service, together with our Privacy Policy, constitute the entire agreement between you and HallPassTracker regarding your use of the Service. These Terms supersede all prior or contemporaneous communications, proposals, and representations, whether oral, written, or electronic, including but not limited to marketing materials, advertisements, sales presentations, product demonstrations, website content, and any other statements made by us or our representatives. No statement, promise, or representation not expressly contained in these Terms shall be binding upon HallPassTracker.

14. Severability

If any provision of these Terms is found to be unenforceable or invalid, that provision will be limited or eliminated to the minimum extent necessary so that these Terms will otherwise remain in full force and effect and enforceable.

15. Governing Law

These Terms are governed by the laws of the State of Texas, United States. Any disputes will be resolved through binding arbitration in Texas.

Contact Information

HallPassTracker
Email: [email protected]

Data Protection Officer:
Mark Johnston

Important Disclaimer

While HallPassTracker employs zero-access architecture and implements multiple security and privacy measures, no technology solution can guarantee absolute security or eliminate all risks. Technology, regulations, and threat landscapes evolve continuously. Use of this service is entirely at your sole discretion and risk. You are solely responsible for determining whether this service meets your specific security, privacy, and compliance requirements. We strongly recommend consulting with your institution's IT and legal departments before implementation.

By using HallPassTracker, you acknowledge that you have read, understood, and agree to these Terms of Service and Privacy Policy.