Trust & data
Security, sessions, and shared devices
How sign-in, automatic session endings, role boundaries, and logged administrative access protect unit records.
Guide at a glance
How to use this guide
Start with
Identify whose data is involved, the unit responsible for it, the purpose, and whether this is support, privacy, security, or safeguarding.
By the end
The request follows the correct channel while access, retention, and disclosure remain proportionate to the need.
Authentication
Authentication is handled by Firebase. All Cadets cannot read a password back and does not store usable password material.
Every person should use an individual account. Account sharing weakens both access control and the history of who changed a record.
Why sessions end
Sessions end after inactivity, with a warning first, and also have a hard upper limit. This reduces the chance that an abandoned classroom computer remains an open roster.
Signing back in does not remove account data. Repeated sign-outs on one school-managed device may indicate a browser policy that clears storage between users.
Shared-device practice
- Sign out when leaving the device.
- Do not allow the browser to save passwords on a shared machine.
- Use separate operating-system or browser profiles where the school provides them.
- Report a lost or compromised account promptly.
- Keep recovery email access current.
Platform administrative access
Platform administrators reach Cadet records only when necessary for support, security, or legal compliance. Their actions are logged like other changes.
A suspected security vulnerability should go to security@allcadets.com rather than a general support thread.
Key terms in this guide
- Cadet record
- The unit’s authoritative operational record for one Cadet; it is separate from the account used to sign in.
- Change history
- The attributable sequence of previous values, new values, actors, and times behind official changes.
Continue reading
Roles, access, and unit boundaries
What instructors, Cadets, position holders, and platform administrators can reach.
Read nextRecover access to an account
A diagnostic path for forgotten passwords, missing reset email, locked-out instructors, and orphaned units.
Read nextRead the change history
Trace what changed, who acted, and what the record contained before the change.
Read next