Sogang QMP Lab Portal privacy policy

The Sogang QMP Lab Portal (https://portal.yqmp.org) is an internal tool of the Quantum Materials Physics group led by Young Woo Choi, Department of Physics, Sogang University. Only Google accounts on the lab's member roster can sign in to the Portal. Registered external collaborators can sign in to their assigned project site on sites.yqmp.org.

Member sign-in uses Google OpenID Connect (scopes openid, email, profile) to confirm the member's email address and to recognize the account on later sign-ins. The portal keeps no Google token for members.

External project-site sign-in uses the same Google scopes. The server stores the collaborator's registered name, email, Google account identifier and site grant, and keeps no Google token. The group leader can revoke the site grant at any time.

The group leader separately connects his own Google Drive (drive scope) so that the portal can create folders and store files in the lab's shared folder, list research project folders, and keep the shared folder's sharing in line with the roster. Only lab members see this data inside the portal.

The lab calendar is read with a service account that has read access to that one calendar.

The Drive refresh token is stored encrypted at rest on the portal server. Access tokens are kept in memory only.

Google user data is not sold, shared with third parties, used for advertising, or used to train generalized AI models.

The portal stores the member roster (name, email, status), issues with their comments and file references, git access tokens (as hashes), HPC allocation figures and job history, and which lab feed articles each member has marked read.

For each member it counts, per day, the page views under each menu and the feed articles read. Only the counts and the time of the day's last count are kept, for 400 days, and only the group leader sees them. The group leader's own use is not counted.

A member who turns on Slack notifications gives the Slack account the messages go to; the portal stores its Slack user id and name. The lab's Slack app then sends that member issue titles and comment excerpts in Slack.

Access can be revoked at any time at myaccount.google.com/permissions. Disconnecting Drive in the portal revokes and deletes the stored token.

ywchoi02@sogang.ac.kr