Privacy Policy
Last updated: November 13, 2026
GFPS WinLog is an internal district service operated by Great Falls Public Schools IT. This page summarizes how we collect, store, protect, and use event telemetry for security, operations, and compliance purposes.
Categories of information collected
We collect the minimum event data required to provide monitoring and investigation capabilities, including:
- Event timestamps, event IDs, severity and source components
- User and service account identifiers where present in events
- Host identifiers such as computer name and IP address
- Device inventory records and related metadata
Purpose and lawful use
Collected data is used solely for:
- Security monitoring and incident response.
- Operational troubleshooting and systems health diagnostics.
- Compliance reporting and internal audits.
Authentication and access control
Access to the system is secured using the district's central identity provider with multi-factor authentication (MFA) and passkey options. Role-based access control restricts view and management operations to authorized personnel. All administrative access is logged and reviewed.
Data retention, deletion, and requests
Event log retention follows district policy. If you have questions about retention periods, or if you need to request access or deletion related to personal data, contact the IT Help Desk or the address below. Requests will be handled in accordance with applicable law and district policy.
Security measures
Data in transit and at rest is protected using industry-standard encryption (TLS, at-rest encryption where required). The application enforces least-privilege access and maintains audit trails for configuration and sensitive operations.
Third parties and disclosures
GFPS WinLog does not disclose raw event data to external third parties except when required by law, regulatory requests, or incident response collaborations approved by district leadership.
Incident response
Security incidents impacting collected logs are handled per the district's incident response plan. Notifications to affected parties will follow district policy and legal requirements.
Contact & support
For privacy-related inquiries or data subject requests, contact: leon_shao@gfps.k12.mt.us