StudyLink Canvas Sync - Privacy Policy
Last Updated: January 30, 2025
Overview
StudyLink Canvas Sync ("the Extension") is a Chrome extension that helps you synchronize your Canvas course assignments with your StudyLink study groups. This privacy policy explains what data we collect, how we use it, and how we protect it.
What Data We Collect
The Extension collects the following data:
- Authentication Token: A secure token obtained through OAuth (Google or Apple Sign-In) that authenticates your requests to the StudyLink API
- Canvas Course Information: Course names, course codes, and Canvas course IDs from your enrolled courses
- Assignment Data: Assignment names, due dates, point values, submission status, and submission timestamps
- Canvas User ID: Your unique identifier within the Canvas LMS system
- Institution Domain: The Canvas domain you're accessing (e.g., institution.instructure.com)
- Sync Metadata: Last sync timestamp and sync results
How We Use Your Data
Your data is used exclusively for the stated purpose of this Extension:
- Fetching your active Canvas courses and assignments
- Synchronizing your assignment information to your StudyLink study groups
- Maintaining your authentication state
- Tracking sync history for your reference
Data Storage and Security
- Local Storage: Your authentication token, username, and sync timestamp are stored locally on your device using browser storage. Only you can access this data.
- API Communication: When you sync, assignment data is transmitted securely (HTTPS) to the StudyLink API backend (studylink-production.up.railway.app) for processing
- No Third-Party Sharing: We do not sell, share, or transfer your data to any third parties
Data Retention
- Local data (tokens, sync history) is retained until you sign out or manually clear the Extension data
- Data synced to StudyLink is retained according to StudyLink's data retention policy
- You can delete all locally stored data at any time by signing out through the Extension popup
Permissions Explained
The Extension requests the following permissions:
- Storage: To securely store your authentication token and sync history on your device
- Tabs: To detect when you're on a Canvas page, manage OAuth authentication tabs, and communicate between the extension and Canvas pages
- Host Permission (https://*.instructure.com/*): To fetch course and assignment data from Canvas LMS on your behalf
Your Rights and Controls
- Sign Out Anytime: Click "Sign Out" in the Extension popup to clear all stored authentication data
- Disable the Extension: You can disable or remove the Extension from your browser at any time
- Access Your Data: All data stored locally is accessible through your browser's developer tools
Changes to This Policy
We may update this privacy policy from time to time. We will notify users of significant changes through the Extension or via our website.
Contact Us
If you have questions about this privacy policy or how we handle your data, please contact us through the StudyLink website or support channel.
Compliance
This Extension is designed to comply with Chrome Web Store Developer Program Policies and respects user privacy by:
- Only requesting necessary permissions
- Storing data locally when possible
- Never selling or sharing user data
- Using secure authentication (OAuth)
- Allowing users to delete their data at any time