Privacy

Privacy Policy

Field School operates the campus at https://fieldschool.ai and https://portal.fieldschool.ai. This policy explains what we collect when you walk the campus, how we use it, and how to reach us. We do not sell personal data.

Last updated 2026-08-25. Operator: Benjamin Johnson.

What we collect

Staff sign-in. If you use Auth.js Google or X sign-in, we receive the name and email your provider shares so we can confirm you are on the staff allowlist and open admin tools. Guest, local name, and the Jordan demo never grant admin. Staff is invite-only.

Member accounts. Free beta members may join with Google, X, or email and password. We store the name, email, provider, and a password hash (never the raw password) on the campus server. Staff access requests include name, email, provider, time, and an optional note.

Public forms. If you join the Saturday list, request a topic, or ask to hear when the shop opens, we store the name you give, the email, the note, the page you sent it from, and the time. Staff read those rows on the portal. We use them to send the Saturday note, cover requested topics, and write when the shop opens. We do not add you to a third-party list.

Optional certificate label. If you type a name and optional email on sign-in to keep a dashboard, those values stay in this browser so certificates and progress can show your name.

Usage on this device. Course progress, quiz answers, tool results, and guest walks are stored in browser localStorage on this device. Member login is a server account. Course progress is still per browser until we sync it.

How we use it

We use this information to operate the educational portal, grant staff admin access to allowlisted people, run free beta member sign-in, review staff access requests, send the Saturday note and other forms you submitted, remember what you finished on this device, issue certificates with the name you typed, and improve courses and campus tools. We do not use it to sell ads or sell your data.

Processors and hosting

If you choose Google or X sign-in, that provider is the identity processor for the OAuth handshake. Paid seats go through Stripe. Stripe sees the card and billing details. We do not store card numbers. Optional request-notify email uses SMTP only when those host settings are present. The live campus is hosted on our servers at fieldschool.ai and portal.fieldschool.ai. Those processors see only what is needed to authenticate, take payment, notify, or serve the site.

Cookies and localStorage

Auth.js uses session cookies so Google, X, and email-password members stay signed in. The campus also writes localStorage keys for theme, guest or local progress, and a staff gate marker after a real staff session. Passwords are not stored in localStorage. Clearing site data on this browser removes guest progress.

Retention

Guest and local labels live in this browser until you clear them or sign out of the local session. Member accounts, access requests, and public form submissions live in the campus store on the server until we delete them at your request. Staff OAuth session data lasts as long as the Auth.js session and provider token rules require. We keep operational logs only as long as needed to run and secure the campus.

We do not sell personal data

The campus is an educational portal. Field School does not sell personal information, does not rent mailing lists, and does not share your name or email with advertisers.

Children

This campus is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 provided information, write to us and we will delete what we can control.

Your choices

You can keep walking as a guest without a login. You can skip the optional email on the certificate form. You can clear this site’s cookies and localStorage in your browser. Members and staff can sign out to end the Auth.js session. To ask us to delete member or staff records we control, email the contact below.

Contact

Privacy questions go to Benjamin Johnson at bjljohnson2012@gmail.com.

Related: Terms of Service.