Privacy Policy

1. Summary

We built FrontlineSync as a practicing teacher. Student privacy isn't a legal checkbox to us — it's a professional obligation we share with you.

2. What Information We Collect

Information you provide directly:

• License key — used to validate your subscription. Stored on our license server.
• Email address — collected at purchase for license delivery and support. We do not sell or share this.

Information the extension stores locally on your device (not sent to us):

• Your Canvas API token — stored in Chrome's local extension storage on your computer only.
• Your Frontline domain — stored locally so the extension knows where to send grades.
• Assignment-to-column mappings — locally cached to speed up repeat syncs.

Information we store on our server:

• Your license key status (active/expired) and plan tier.
• Assignment name-to-column name mappings (e.g., "Test 1" → "Assessment #1"). These contain no student names, IDs, or scores.

We do not use cookies, run analytics, or collect usage data of any kind.

3. Student Data

We do not collect, receive, store, or process any student data.

This includes but is not limited to: student names, student ID numbers, SIS IDs, grade scores, submission content, demographic information, or any other information that could identify a student.

Student grades are read from Canvas and written to Frontline entirely within your own browser session. At no point does this data pass through or reach any FrontlineSync server.

4. How the Extension Works

FrontlineSync is a Chrome browser extension. When you initiate a grade push, the following happens entirely on your local machine:

• The extension reads grade data from the Canvas Grades page you have open in your browser, using your existing logged-in Canvas session.
• The extension writes those grades into the Frontline gradebook tab you have open in your browser, using your existing logged-in Frontline session.
• The data passes between the two browser tabs through the extension's background service worker — all on your computer. No external network request is made as part of this transfer.

The extension does make one external network request during a grade push: it checks whether a saved column mapping exists for the assignment. This request contains the assignment name and your district license key — no student data.

5. FERPA Compliance

The Family Educational Rights and Privacy Act (FERPA) protects the privacy of student education records. FrontlineSync is designed to operate in a manner consistent with FERPA requirements for teachers using school-sanctioned tools.

Key FERPA-relevant facts about FrontlineSync:

• Student education records (grades) are never transmitted to FrontlineSync or any third-party server.
• The extension accesses student grade data only within the authenticated browser sessions of the classroom teacher who holds the appropriate access rights to that data.
• No student data is retained, logged, or stored by FrontlineSync beyond the teacher's active browser session.

If you are a school administrator with FERPA-related questions about FrontlineSync, please contact us at the address below.

6. Data Storage & Security

Data stored on our server (license keys and column name mappings) is stored using Cloudflare Workers KV — an enterprise-grade key-value store with encryption at rest and in transit.

Data stored on your device (Canvas API token, Frontline domain, local mappings) is stored using Chrome's built-in chrome.storage.local API, which is sandboxed to the FrontlineSync extension and inaccessible to other extensions or websites.

We retain your email address and license record for as long as your subscription is active, plus a reasonable period thereafter for support purposes. You may request deletion at any time by contacting us.

7. Third Parties

FrontlineSync uses the following third-party services:

• Cloudflare Workers — hosts our license validation API. Cloudflare may log IP addresses and request metadata per their standard infrastructure logging. No student data is involved in any request to our API.
• Stripe (for paid subscriptions) — processes payments. Stripe's privacy policy governs payment data. We do not store payment card information.

We do not share your information with any other third parties. We do not sell your data.

8. Your Rights

You have the right to:

• Request a copy of any personal information we hold about you (your email and license record).
• Request deletion of your personal information and license record.
• Opt out of any future communications from us (we only send license-related emails — no marketing).

To exercise any of these rights, email us at the address below with the subject line "Privacy Request."

9. Contact Us

If you have questions about this Privacy Policy or how FrontlineSync handles data, please contact:

FrontlineSync
Tyler, Texas
chris85cool17@gmail.com

We will respond to privacy inquiries within 5 business days.