This document outlines the standard operating procedures for data handling at First for Student. As an educational resource for CUNYFirst navigation, our priority is instructional clarity without the necessity of personal data collection.
First for Student provides neutral, step-by-step documentation for navigating CUNYFirst and related campus systems. We operate as a static reference library. Because our core function is educational, we do not require, request, or store your personal identification, CUNYFirst password, or full financial account numbers.
No user accounts are required to access our instructional blueprints or portal guides.
All procedures are audited for privacy safety to ensure no sensitive data entry is encouraged.
We do not collect personal data such as names, email addresses, or phone numbers. Our servers may log standard technical metadata (IP addresses, browser types, referral pages) for the sole purpose of security monitoring and traffic volume analysis. This data is not linked to any individual identity.
While our guides describe interactions with CUNY systems and common campus vendors, we are not affiliated with those entities. We do not transmit data to them, nor do we receive any data from your CUNYFirst or campus login sessions.
Anonymous session tokens are used to maintain your navigation path only for the duration of your visit.
Queries are processed locally. We do not store or sell your search history to third-party data brokers.
Contact info provided via email is used exclusively to resolve your specific inquiry and is then archived.
First for Student maintains technical logs for no longer than 30 days unless a security breach or legal requirement necessitates longer retention. We use industry-standard encryption protocols (TLS/SSL) for all communication between your browser and our servers.
Our internal security audits ensure that even the limited metadata we process remains isolated from marketing analytics. We do not use persistent cross-site tracking pixels that follow your activity once you leave our guide.
Although we do not collect personal data, we recognize your rights under the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). This includes:
Review our operational terms to understand how we maintain neutral, vendor-independent standards.
