Privacy & sign-in data

Administrators create accounts after verifying identity. The site stores login names, original roster names, permissions, and salted password hashes, not recoverable passwords. Accounts are not connected to Facebook.

Authentication cookies expire after 8 hours, with sign-in required after 30 minutes of inactivity. Initial passwords can be used once; the password setup session lasts 15 minutes.

The account roster is not a public member directory. Public names, contacts, and research follow your publishing choices. Administrators may deactivate accounts or revoke meeting access.

Administrators can see login and original names and permissions. Account creation, resets, deactivation, and credential changes are logged without passwords. Hashed identifiers help limit login attempts. The contact page connects to Google to display its map.