How HallStride protects information
Encrypted Connections
HallStride production traffic is served over HTTPS. Secure session cookies, CSRF cookie protections, and HSTS are enabled for the production application.
Role-Based Access
Teachers, hall monitors, and administrators receive different levels of access based on their assigned HallStride role.
School-Level Data Controls
Application queries are scoped to the authorized school so student, staff, and pass records stay within the appropriate school context.
Protected Credentials
User passwords are handled through Django authentication, and production secrets are stored outside the application source code.
Restricted Administration
Sensitive school-management functions are protected by server-side role checks, while Django administrative access is separately restricted.
No Student Data Sales
HallStride does not sell student personal information or use student information for targeted advertising.
HallStride continually reviews and strengthens its security practices as the platform evolves.