Privacy Policy

1. Summary

We built GradeBridge as a practicing teacher. Student privacy isn't a legal checkbox to us — it's a professional obligation we share with you.

2. What Information We Collect

Information you provide directly:

• License key — used to validate your subscription. Stored on our license server.
• Email address — collected at purchase for license delivery and support. We do not sell or share this.

Information the extension stores locally on your device (not sent to us):

• Your Canvas API token — stored in Chrome's local extension storage on your computer only.
• Your Frontline domain — stored locally so the extension knows where to send grades.
• Assignment-to-column mappings — locally cached to speed up repeat syncs.

Information we store on our server:

• Your license key status (active/expired) and plan tier.
• Assignment name-to-column name mappings (e.g., "Test 1" → "Assessment #1"). These contain no student names, IDs, or scores.

We do not use cookies, run analytics, or collect usage data of any kind.

3. Student Data

We do not collect, receive, store, or process any student data.

This includes but is not limited to: student names, student ID numbers, SIS IDs, grade scores, submission content, demographic information, or any other information that could identify a student.

Student grades are read from Canvas and written to Frontline entirely within your own browser session. At no point does this data pass through or reach any GradeBridge server.

4. Chrome Extension Permissions

GradeBridge requires specific permissions to function. Here's why we request each one:

• Host permissions for Canvas and Frontline domains — needed to read grades from Canvas and write them to Frontline. These permissions allow the extension to access only the gradebook pages where you are already logged in.
• chrome.storage.local — stores your Canvas API token, Frontline domain, and assignment mappings locally on your computer, inaccessible to other extensions or websites.
• Background service worker — used to route messages between content scripts and coordinate data transfer between Canvas and Frontline tabs.

What we can and cannot access: The extension can only read and write data on web pages you have open and are already authenticated to. It cannot access your browser history, other extensions, websites you don't visit, or any data outside of Canvas and Frontline.

5. How the Extension Works

GradeBridge is a Chrome browser extension. When you initiate a grade push, the following happens entirely on your local machine:

• The extension reads grade data from the Canvas Grades page you have open in your browser, using your existing logged-in Canvas session.
• The extension writes those grades into the Frontline gradebook tab you have open in your browser, using your existing logged-in Frontline session.
• The data passes between the two browser tabs through the extension's background service worker — all on your computer. No external network request is made as part of this transfer.

The extension does make one external network request during a grade push: it checks whether a saved column mapping exists for the assignment. This request contains the assignment name and your district license key — no student data.

6. Limited Use Certification

GradeBridge certifies that it complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.

Specifically:

• GradeBridge accesses web content (Canvas and Frontline data) only to provide the core functionality of syncing grades between the two platforms.
• GradeBridge does not use, transfer, sell, or share any user data collected through the extension for any purpose other than providing the grade-syncing service.
• GradeBridge does not use web content or user data for advertising, marketing, analytics, or any other purpose unrelated to the extension's stated function.
• GradeBridge does not combine or link user data from the extension with data from other sources for purposes other than providing the service.
• All data collection is transparent and disclosed in this Privacy Policy.

7. FERPA Compliance

The Family Educational Rights and Privacy Act (FERPA) protects the privacy of student education records. GradeBridge is designed to operate in a manner consistent with FERPA requirements for teachers using school-sanctioned tools.

Key FERPA-relevant facts about GradeBridge:

• Student education records (grades) are never transmitted to GradeBridge or any third-party server.
• The extension accesses student grade data only within the authenticated browser sessions of the classroom teacher who holds the appropriate access rights to that data.
• No student data is retained, logged, or stored by GradeBridge beyond the teacher's active browser session.

If you are a school administrator with FERPA-related questions about GradeBridge, please contact us at the address below.

8. Data Storage & Security

Server-side data: License keys and column name mappings are stored using Cloudflare Workers KV — an enterprise-grade key-value store with encryption at rest and in transit. All API communications use HTTPS encryption.

Local data: Canvas API tokens, Frontline domains, and assignment mappings stored on your device use Chrome's built-in chrome.storage.local API. This storage is sandboxed to the GradeBridge extension and inaccessible to other extensions, websites, or users of your computer.

Data retention: Email addresses and license records are retained for as long as your subscription is active, plus 90 days thereafter for support and account recovery purposes. You may request earlier deletion at any time.

No logs of student data: GradeBridge does not create logs, backups, or records of any student grade data that passes through the extension, even temporarily.

9. Third Parties

GradeBridge uses the following third-party services:

• Cloudflare Workers — hosts our license validation API. Cloudflare may log IP addresses and request metadata per their standard infrastructure logging. No student data is involved in any request to our API.
• Stripe (for paid subscriptions) — processes payments. Stripe's privacy policy governs payment data. We do not store payment card information.

We do not share your information with any other third parties. We do not sell your data.

10. Data Deletion & Uninstall

When you uninstall the GradeBridge extension:

• All local data stored on your device (Canvas API token, Frontline domain, mappings) is automatically deleted by Chrome.
• Your license key record remains on our server for account and support purposes, but can be deleted on request.
• Student grade data is never stored, so no student data is affected by uninstallation.

Requesting data deletion: To request deletion of your email address and license record before your subscription expires, email us with the subject line "Delete My Account."

11. Your Rights

You have the right to:

• Request a copy of any personal information we hold about you (your email and license record).
• Request deletion of your personal information and license record.
• Opt out of any future communications from us (we only send license-related emails — no marketing).

To exercise any of these rights, email us at the address below with the subject line "Privacy Request."

12. Policy Changes

GradeBridge may update this Privacy Policy from time to time. When we make material changes, we will notify you by:

• Updating the "Last updated" date at the top of this policy.
• Sending an email notification to the address associated with your license (if applicable).
• Posting a notice on the GradeBridge website home page.

Your continued use of the GradeBridge extension after any changes constitutes your acceptance of the updated Privacy Policy. We recommend reviewing this policy periodically to stay informed about how we protect your data.

13. Refund Policy

All GradeBridge purchases include a 14-day money-back guarantee. If you are not satisfied with your purchase for any reason, you may request a full refund within 14 days of your original purchase date.

How to request a refund: Visit frontlinesync-site.pages.dev/refund.html, enter your license key, and follow the prompts. Refund eligibility is verified automatically. If your purchase is within the 14-day window, your refund will be processed immediately and your license key will be deactivated. Refunds are returned to your original payment method and typically appear within 5–10 business days depending on your bank.

After 14 days: Purchases are non-refundable. Annual plans are a commitment in exchange for a discounted rate and are not eligible for pro-rated refunds after the guarantee period expires.

Exceptional circumstances: If you have an unusual situation — such as a mid-year school change that makes the extension unusable — reach out directly at chris85cool17@gmail.com and we will do our best to help on a case-by-case basis.

14. Contact Us

If you have questions about this Privacy Policy or how GradeBridge handles data, please contact:

GradeBridge
Tyler, Texas
chris85cool17@gmail.com

We will respond to privacy inquiries within 5 business days.