Providers & subprocessors

Operator-hosted service

Andrew Hall operates Hallway Hero in Florida, United States, using operator-managed infrastructure. The operator is responsible for hosting administration and access. Exact storage geography, host security evidence, and recovery arrangements should be confirmed during school review.

Stripe — adult billing

Stripe processes adult checkout, subscription, and billing-portal activity when paid billing is enabled. Hallway Hero retains billing identifiers and subscription status. Do not submit student names, rosters, or school student numbers as billing details. Payment processing does not authorize student data sharing for other purposes.

Cloudflare — infrastructure and registration

Cloudflare may provide DNS and Turnstile registration protection. DNS service alone is different from proxying decrypted application traffic. Turnstile processes registration-device and security signals for abuse prevention. The deployment's routing and contractual details require confirmation; this page does not authorize a change to student-traffic TLS termination.

If manually enabled, Cloudflare Web Analytics measures visits only on allowed public marketing and policy pages. It is not enabled by this disclosure and must not measure account or classroom workflows. Advertising, session replay, student journeys, and custom intent events are outside this scope.

Account email — configured SMTP provider

The configured SMTP provider delivers adult account verification, password-reset, and related account messages. These messages can contain an adult email address and time-limited account links. Provider identity and processing geography depend on deployment configuration and must be supplied to a school before it relies on this provider inventory. Student rosters are not an account-email payload.

Google Drive — planned encrypted backup destination

The intended offsite arrangement is encrypted recovery artifacts copied from the operator's Unraid backup workflow to Google Drive. This planned destination is not evidence of a current successful upload, encrypted historical copies, verified retention, or a successful downloaded restore. The operator must verify those controls and the applicable Google account, storage geography, and agreements.

Backup keys must be kept separately with a recoverable operator process. Deleting an active record does not immediately remove older backup generations. Confirm the actual recovery and expiry process with the operator.

School review and provider changes

This list describes service roles; it does not claim that all optional providers are active, every provider contract is reviewed, or every processing location is confirmed. Ask hello@hallwayhero.app for current deployment details and a school-specific agreement before transferring records.

Material provider changes should be communicated through account notices or direct school communication, with any additional notice, approval, or objection process recorded in the school's agreement. Historical policy versions remain available below.