Otherwise, enjoy your visit!
Nonpersonal Information We Record
How to Opt Out or Disable Cookies
Links to Other Sites
How Collected Information Is Used
Information from the Contact Us Page
Information Collected for the Federal Student Aid Feedback System
How StudentAid.gov Uses Third-party Websites and Applications
How User Information in the "My Federal Student Aid" Section of the Website Is Protected
If you do nothing during your visit but browse through the website, read pages, or download information, our Web server will automatically record some general information about your visit.
During your visit, our Web server will record the following:
- The Internet domain for your Internet service, such as "xcompany.com" or "xcompany.net" if you use a private Internet access account, or "yourschool.edu" if you connect from a college or university domain
- The type of browser (such as "Mozilla Firefox version x" or "Internet Explorer version x") that you are using
- The type of operating system that you use (such as Macintosh, Unix, or Windows)
- The date and time you visit our site, and the Web pages that you visit on our site
- The address of the previous website you were visiting, if you linked to us from another website
The user is not identified in the collection of nonpersonal information.
The Office of Management and Budget Memo M-10-22, Guidance for Online Use of Web Measurement and Customization Technologies (PDF, 106KB), allows federal agencies to use session and persistent cookies subject to the limitations described within the guidance.
Cookies from StudentAid.gov Web pages collect information only about your browser's visit to the site; they do not collect any personal information about you.
There are two types of cookies: single-session (temporary) and multi-session (persistent).
We use temporary session cookies for such technical purposes as enabling better navigation through our site. These temporary cookies let our server know that you are continuing a visit to our site. The OMB Memo 10-22 guidance defines our use of temporary session cookies as "Usage Tier 1-Single Session." The guidance states, "This tier encompasses any use of single-session Web measurement and customization technologies." Single-session cookies last only as long as your Web browser is open. Once you close your browser, the cookie disappears.
We use persistent cookies to enable Google Analytics (third-party analytics provider) to differentiate between new and returning visitors to our site. Persistent cookies from Google Analytics remain on your computer between visits to StudentAid.gov for up to two years.
Google Analytics calculates how many individual users visited the StudentAid.gov website in a given time. Combined with total visits, these tools help us create a more comprehensive story about StudentAid.gov users and their visit patterns.
The OMB Memo 10-22 guidance defines our use of persistent cookies as "Usage Tier 2-Multi-session without Personally Identifiable Information (PII)." The guidance states, "This tier encompasses any use of multi-session web measurement and customization technologies when no PII is collected."
Pursuant to OMB Memo 10-22 Attachment 3, these cookies collect information similar to that automatically received and stored on the servers hosting StudentAid.gov. These servers do not collect PII, and StudentAid.gov does not access or store the raw information collected through these cookies. We view aggregate statistical analyses prepared by our third-party analytics providers, but these analyses do not include any PII. We do not sell, rent, exchange, or otherwise disclose this information to individuals or organizations.
StudentAid.gov will keep data collected long enough to achieve the specified objective for which they were collected.
Your website browser’s standard setting enables cookies by default. If you do not wish to have session or persistent cookies stored on your machine, you can opt out or disable cookies in your browser. You will still have access to all information and resources throughout the StudentAid.gov website. However, turning off cookies may affect the functioning of some content within StudentAid.gov. Be aware that disabling cookies in your browser will affect cookie usage at all other websites you visit as well.
Our policy discloses the privacy practices for StudentAid.gov. But StudentAid.gov provides links to other websites. When you leave StudentAid.gov, you will be going to sites that are beyond our control. We try to ensure that links that leave our site are clearly labeled. These other sites may send their own cookies to users, collect data, or solicit personal information. The privacy policies and procedures described here for StudentAid.gov do not apply to any external links. We encourage you to read the privacy policies of any site you link to from ours, especially if you share any personal information. Be informed. You are the person best qualified to protect your own privacy.
If you decide to send us an e-mail via our Contact Us page, the message will contain your return e-mail address. If you include personally identifiable information in your e-mail because you want us to address issues specific to your situation, we may use that information in responding to your request. This information is not maintained in a Privacy Act system of records.
Also, e-mail is not necessarily secure against interception. Please send only information necessary to help us process your request.
You may make a complaint anonymously. However, if you decide to lodge a complaint utilizing our Federal Student Aid Feedback System or by calling the designated Enterprise Feedback phone number, you may choose to include your e-mail address or telephone number so that we can contact you regarding your complaint. Providing personally identifiable information, such as your Social Security number, is not required. However, without such information, we may not be able to conduct a full investigation into your complaint. If you provide personally identifiable information because you want us to address issues specific to your situation, we may use that information in contacting authorized third parties. Federal Student Aid maintains a system of records notice that permits private information to be disclosed to these authorized third parties when it is necessary to obtain further information about your complaint, request for assistance, or other inquiry, before it can be resolved.
As a response to OMB Memo M-10-06, Open Government Directive, StudentAid.gov uses a variety of technologies and social media services to communicate and interact with citizens. These third-party website and application (TPWA) tools include popular social networking and media sites, open-source software communities, and more. Examples include Facebook, Twitter, and YouTube.
TPWAs are not exclusively operated or controlled by StudentAid.gov. Users of TPWAs often share information with the general public, user community, and/or third-party websites, which may use this information in a variety of ways. TPWAs could also cause personally identifiable information (PII) to become available or accessible to StudentAid.gov and the public, regardless of whether the PII is explicitly asked for or collected by us.
For more information on third-party websites and applications, you can review our social media guidelines.
In accordance with the Federal Information Security Management Act of 2002 (FISMA), StudentAid.gov must receive a signed Authority to Operate (ATO) from a designated senior Federal Student Aid official. The ATO process includes a rigorous assessment of security controls, a plan of action and milestones to remediate any identified deficiencies, and a continuous monitoring program to address threats in real time. StudentAid.gov received its initial ATO on July 12, 2012, and continues to maintain this ATO in accordance with federal security requirements.
FISMA controls implemented by StudentAid.gov comprise a combination of management, operational, and technical controls, and include the following control families: access control, awareness and training, audit and accountability, security assessment and authorization, configuration management, contingency planning, identification and authentication, incident response, maintenance, media protection, physical and environmental protection, planning, personnel security, risk assessment, system and services acquisition, system and communications protection, system and information integrity, and program management.
For site security purposes and to make sure this service remains available to all users, this government computer system employs software programs to monitor network traffic to identify unauthorized attempts to upload or change information or otherwise cause damage. Unauthorized attempts to upload or change information on this site are strictly prohibited and may be punishable under the Computer Fraud and Abuse Act of 1986 and the National Information Infrastructure Protection Act. Server logs are scheduled for regular destruction in accordance with the National Archives and Records Administration General Schedule 20.