Guest access privacy policy

For the sign-in that opens class materials shared by Russian School Erudite.

Erudite Russian Language Educational and Cultural Center, Inc., a Maryland nonprofit corporation. Effective 2026-09-19.

Short version: when you sign in with Google, the school receives your name, your email address, and the basic profile details Google shows you on the approval screen, which can include your picture and your language setting. Microsoft, which hosts the materials, records each sign-in. Nothing else, and nothing from inside your Google account. It is used only to let you into the materials shared with you. It is never sold, never used for advertising, and never passed to anyone outside the school, Microsoft as its cloud provider, and Google as the sign-in provider you chose.

Who this is from

Erudite Russian Language Educational and Cultural Center, Inc., referred to here as the school: a nonprofit Russian language, educational, and cultural center for children, based at Silver Creek Middle School in Kensington, Maryland, serving families across Montgomery County and the Greater Washington area. The school runs a Microsoft 365 tenant and shares class materials from it. The Google application named Erudite on the sign-in approval screen belongs to the school.

What this covers

The guest sign-in only: the step where a parent, guardian, teacher, or other invited guest proves who they are in order to open a document, folder, or site the school has shared with them. It applies to every sign-in method offered, which are Sign in with Google, a Microsoft account, and a one time passcode sent by email.

It does not cover the rest of this website, enrollment, payments, or any other school activity.

Where your email address came from

Before any of this begins, the school already holds your email address, because you gave it on an enrollment form or to your child's teacher. Those addresses are what the school loads into Microsoft as guest invitations. The school does not buy contact lists and does not take addresses from Google.

What the school receives

Your name, so staff can tell one guest from another when granting access.
Your email address, which identifies your guest account and receives invitations.
Basic profile details from your Google or Microsoft account, which can include your profile picture and your language setting.
An account identifier that Google or Microsoft uses to recognise the same account at every later sign-in. Microsoft stores it as the link between your guest account and the account you sign in with.
Sign-in records kept by Microsoft, such as the time, whether it succeeded, and the approximate location, which are used for security and for working out whether an invitation was ever used.

What the school does not receive

No access to Gmail, Google Drive, Google Contacts, Google Calendar, Google Photos, or any other Google service. The application requests only the basic sign-in scopes openid, email, and profile.
No password. You enter that on Google's or Microsoft's own page, and the school never sees it.
No browsing history, no advertising identifiers, and nothing about your device beyond what Microsoft records for the sign-in itself.

How it is used

To create and match your guest account so you can open what was shared with you.
To answer you when you write about a problem with access.
To keep the guest list current, which includes finding invitations that were never accepted and removing accounts that are no longer needed.
To protect the school's Microsoft 365 environment, for example by investigating a suspicious sign-in.

It is not used for marketing or fundraising. School announcements are sent separately, using the contact details families give at enrollment, and unsubscribing from those does not affect your access to materials.

Google API Services limited use

The school's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Information received through Sign in with Google is used only to provide the guest sign-in described here. It is not transferred to others except as needed to provide that sign-in, not used for advertising, and not read by a person except where you ask for support, where security requires it, or where the law requires it.

Who else sees it

Microsoft, as the school's cloud provider. Guest accounts and sign-in records are held in Microsoft Entra ID and Microsoft 365 under Microsoft's own terms.
Google, to the extent that you choose to sign in with a Google account. What Google does with that sign-in is governed by Google's own privacy policy, and Google keeps its own record of it.
School staff who administer access, and the teacher whose materials are shared with you.

Beyond that, nobody. The school does not sell personal information, does not trade it, and does not share it with advertisers or data brokers. It may be disclosed where the law requires it.

How long it is kept

A guest account is kept while your family is enrolled or you otherwise need access to shared materials.
An invitation that is never accepted is removed once it is more than one school year old.
A guest account that is no longer needed is removed. For 30 days after removal it can be restored, after which it is permanently deleted.
Sign-in records are kept for as long as Microsoft Entra ID retains them, which for most activity logs is 30 days.

Your choices

Ask for deletion. Write to the address below and the school will delete your guest account and the profile details attached to it. You will lose access to the shared materials, which is the only thing that account does.
Ask what is held. Write to the same address and the school will tell you what its guest directory holds about you.
Use a different address. Tell the school which email address you would rather be invited at.
Withdraw Google's involvement at myaccount.google.com/permissions. Note what this does and does not do: it removes the school's application from your Google account, and the next time you sign in Google will simply ask you to approve it again. If you would rather not use Google at all, ask the school to move you to another sign-in method.

What deletion cannot reach: Google keeps its own record that you signed in to the school's application, and Microsoft's sign-in logs age out on their own schedule rather than on request. The school can only delete what the school holds.

Children

This sign-in is for adults: parents, guardians, staff, and invited teachers. The school does not knowingly create guest accounts for children through it. If you believe a child has been invited as a guest, write to the school and the account will be removed.

Security

Guest sign-in requires a second step in addition to your account, such as an approval in an authenticator app or a code sent to your phone, and access is limited to the people a document was shared with. The school added Google and Microsoft account sign-in to reduce its reliance on codes sent by email, which are no longer considered a sound way to prove identity. Email one time passcodes remain available for guests whose address is with neither provider.

Changes

If this policy changes in a way that matters, the effective date above changes with it and the new version replaces this page. Material changes will be mentioned in a school announcement.

Contact

Email: info@russianerudite.com

Phone: (202) 549-7277 and (240) 630-1030

Mailing address: Erudite Russian Language Educational and Cultural Center, Inc., 4104 Chippendale Ct, Rockville, MD 20853

Website: www.russianerudite.com

How guest sign-in works: Guest access

Erudite Russian Language Educational and Cultural Center, Inc. Google and Microsoft are sign-in providers only and are not affiliated with the school.