PRISM Privacy Policy
Summary
- PRISM has no sign-up. Contest judges get an invited account, and the dashboard needs that sign-in. One form, the override log, asks for a name and a reason.
- Every sensor reading on the dashboard is simulated. The override form asks for your name. Enter nothing else personal.
- PRISM uses no analytics, advertising, tracking pixels or third-party scripts.
- If you press Explain this reading, PRISM's server sends the simulated score result (numbers and labels, no personal data) to Anthropic's API and shows the reply.
- PRISM does not sell or share your data.
- The site loads over HTTPS, which encrypts traffic between your browser and PRISM.
1. Who runs PRISM
PRISM (Predictive Real-time Infrastructure Sensor Monitoring) is a student project built by James Moore for the CUA Busch School AI Vibe Coding Contest, Fall 2026. James Moore operates it. The Catholic University of America does not operate this site and does not receive data from it.
2. What PRISM collects
Information you give PRISM. The dashboard has demo controls that send a scenario name and a reading number to the server so it can return a simulated reading. PRISM does not store these values. When PRISM says to stop the machine and you choose to keep it running, a form asks for your name and your reason. PRISM stores both, with the time, the machine, the risk score and the simulated reading. PRISM does not check that the name is yours.
Information collected automatically.
| Item | What it is | Why |
|---|---|---|
| Server logs | Your IP address, the date and time, the page requested, your browser type and the response code. The web server and the hosting platform record these when you load a page. | To run the site, fix errors and protect against abuse. |
| Session cookie | A cookie named prism-session. The framework (Laravel) sets it. It holds a random session ID. It expires after 120 minutes of inactivity. | Standard framework behavior. PRISM does not use it to identify you or track you. |
| Security cookie | A cookie named XSRF-TOKEN. The framework sets it to guard against forged requests. | Security. |
PRISM stores three kinds of record. The first is the judge accounts. Each holds a name, an email address and a password stored as a hash. The entrant adds each one by typing the judge's email address on a private page, and nobody can sign up alone. The second is the override log. It holds the name and reason you type. A password protects the page that lists the log. The third is a rating of an AI answer, if you press Helpful or Wrong. It holds the rating, the step, the source, the scenario, the reading number and the time. It holds no name, no free text and no IP address.
Both cookies are strictly necessary for the site to work, so PRISM does not ask for cookie consent. A short notice tells you about them. Your choice to dismiss the notice is stored in your browser (local storage), not in a cookie, and is never sent to PRISM. .
3. How PRISM uses information
- To serve the dashboard and return simulated readings.
- To keep a record of who kept a machine running after a stop warning, when, and why.
- To keep the site secure and working.
PRISM does not use information for advertising, profiling or automated decisions about you.
4. Who receives information
PRISM runs on Amazon Web Services (AWS Elastic Beanstalk, region us-east-2). AWS hosts the server and its logs. See the AWS Privacy Notice for how AWS handles data.
PRISM does not sell your information. PRISM does not share it with anyone else, except where the law requires disclosure. PRISM also gives a judge's email address to the mail service that delivers the invite.
5. Retention
PRISM sets no custom retention period for server logs. Logs stay on the hosting server until the platform rotates them or the server is replaced or shut down. Session cookies expire after 120 minutes of inactivity. You can delete cookies in your browser settings at any time. Override log entries have no deletion schedule. They stay until James Moore removes them or the server is replaced or shut down.
6. Security
The live site loads over HTTPS with a free Let's Encrypt certificate, so traffic between your browser and PRISM is encrypted. Do not enter sensitive information into any page. The only fields ask for a name and a reason. Enter nothing else personal.
7. Your choices and rights
- Block or delete cookies in your browser. The dashboard still works.
- Contact the address below to ask what PRISM holds about you, or to ask for deletion of override log entries you made or log entries tied to your IP address. PRISM will respond within 30 days.
- Residents of some places (such as California, Virginia and the European Economic Area) have additional legal rights over personal data. Contact the address below to exercise them.
8. Children
PRISM is built for maintenance technicians and is not directed to children under 13. PRISM does not knowingly collect information from children.
9. Third-party links
The dashboard cites outside sources, including the UCI Machine Learning Repository. Those sites have their own privacy policies.
When you press Explain this reading, PRISM's server sends the simulated score result to Anthropic's API. PRISM sends no text typed by a visitor. Anthropic has its own privacy policy. When the entrant invites a judge, PRISM's server sends the judge's email address to the mail service named in its settings, which delivers the invite. That service has its own privacy policy.
10. Changes
The roadmap includes live sensor feeds and alerts. Those features would collect new data. PRISM will update this policy before it collects anything new. The effective date at the top shows the latest version.
11. Contact
James Moore, moorejp@cua.edu
See also the Terms and Conditions.