Privacy Policy
Effective date: October 24, 2026
In short: the Assignment Tracker for Canvas extension does not collect, store on any server, share, or sell any personal information. Everything it does happens inside your browser.
This policy covers the Assignment Tracker for Canvas browser extension (the "Extension") and this website (the "Site"), maintained by David Menendez as an independent open-source project (the "Developer", "we").
1. What the Extension reads
When you open a course page on a Canvas site where the Extension is active, it asks that same Canvas site for the list of the course's assignments and your own submission status. This includes assignment names, due and availability dates, points possible, your scores, and flags such as late, missing, or excused.
It makes these requests with your existing Canvas login session, directly from your browser to that Canvas site. The Extension only sends read (GET) requests. It cannot submit, change, or delete anything.
2. How that information is used
Only to display badges and a summary panel on the Canvas page you are viewing. The information is processed in your browser and is never sent to the Developer or to any third party. We do not operate any server that receives data from the Extension.
3. What we do not do
- No collection or transmission of personal data, grades, or browsing activity.
- No analytics, telemetry, crash reporting, advertising, or tracking of any kind.
- No requests to any website other than the Canvas site you are on.
- No remote code: all code is included in the Extension package and can be reviewed on GitHub.
- No passwords, API tokens, or cookies are requested, read, or stored by the Extension.
- No sale, rental, or sharing of data. There is no data to share.
4. What is stored on your device
| What | Where | How long |
|---|---|---|
| A temporary copy of the course's assignment data, to avoid reloading it on every page | The browser tab's session storage for that Canvas site | About 2 minutes; cleared when the tab closes |
| Panel preferences (collapsed or expanded, selected filter) | The browser's local storage for that Canvas site | Until you clear your browser data |
| Permission for a custom Canvas address you chose to enable | Your browser's extension permissions | Until you remove it in the Extension's options or browser settings |
This data stays on your device. Uninstalling the Extension or clearing your browser data removes it.
5. Browser permissions
| Permission | Why it's needed |
|---|---|
Access to *.instructure.com course pages |
To show badges on Canvas course pages hosted by Instructure. |
| Optional access to a site you add | Only if you choose to enable the Extension on your school's own Canvas address. Granted for that one site only. |
scripting |
To run the Extension on a custom Canvas address after you allow it. |
activeTab |
So the toolbar popup can see which site you are on when you click it, and offer to enable it there. |
6. Your school and Canvas
Your school and Instructure (the company behind Canvas) have their own privacy policies, which govern the data held in Canvas. The Extension's requests to Canvas are ordinary API requests made with your session and may be recorded in Canvas's own logs, like any other Canvas activity. The Extension does not change what Canvas or your school collects.
Because the Extension does not collect or receive student records, the Developer does not hold any education records or personal information about you.
7. This website
This Site is a static page hosted by GitHub Pages. It uses no cookies, analytics, embedded content, or third-party fonts or scripts. GitHub, as the hosting provider, may process technical information such as your IP address to deliver the page and keep it secure; see the GitHub Privacy Statement.
If you open an issue or contribute on GitHub, what you post there is public and handled under GitHub's terms and privacy statement. Please don't post grades, names, or other personal information.
8. Children
The Extension is intended for students who use Canvas, generally in high school or higher education. It does not knowingly collect any information from anyone, including children under 13 (or the applicable age in your country), because it collects no information at all.
9. Your rights
Since we don't collect or hold personal data about you, there is nothing for us to access, correct, export, or delete on request. You can delete all locally stored Extension data at any time by uninstalling the Extension or clearing your browser's site data. For data held in Canvas, contact your school.
10. Changes to this policy
If this policy changes, the updated version will be posted on this page with a new effective date, and the change history is visible in the project's public repository. If the Extension's data practices ever change in a meaningful way, the change will be announced in the release notes before it takes effect.
11. Contact
Questions about privacy: open an issue at github.com/davidmenendez9901/assignment-tracker-for-canvas/issues. To report a security issue privately, use the repository's security policy.