Veracross Grade Snapshot Privacy Policy
Overview
Veracross Grade Snapshot is an independent browser extension that shows unofficial grade estimates from grade information visible in a user's own Veracross account. It is not affiliated with, endorsed by, or operated by Veracross or any school.
Information processed locally
The extension reads Veracross page data in the browser to calculate and display grade estimates. This can include class names, teacher names, assignments, scores, missing-work status, grading periods, and local extension settings. Most grade calculation happens locally in the browser.
Information collected by analytics
The extension sends usage analytics to Umami at stats.codegraph.cc. Analytics events can include a generated install ID, session ID, extension version, school tenant ID, allow/disallow status for a school, feature usage events, counts such as number of classes or grading periods, and basic browser context normally transmitted with web requests such as IP address and user agent. Any possible personally identifiable information included in analytics or diagnostic data is encrypted in the browser before transmission.
Maintainer authentication
For restricted schools, maintainer access uses this backend worker and KeyAuth. The worker receives and processes a maintainer license key, school tenant ID, extension version, generated device hash, and optional device rebind flag. The worker forwards required authentication data to KeyAuth to validate maintainer access and retrieve authorization variables such as role, allowed tenants, account status, subscription status, and approved device hash.
Information not sold
We do not sell user data. We do not use grade data for advertising or credit eligibility decisions.
Sharing
Data may be processed by service providers used to operate the extension and backend, including Cloudflare Workers, Umami analytics, and KeyAuth for maintainer authentication. Data may also be disclosed if required by law or to protect the security and integrity of the service.
Retention
Analytics and diagnostic data are kept only as long as needed for operations, security, analytics, and support. Diagnostic data is intended to be deleted within 30 days unless needed longer to investigate an active support request or security issue.
Security
Possible personally identifiable diagnostic data is encrypted before upload, and maintainer authentication responses are time-limited. No method of transmission or storage is perfectly secure, but we use technical safeguards intended to reduce unnecessary exposure of student data.
Children and students
The extension may be used by students. It processes grade information visible to the signed-in Veracross account. Users should follow school rules and should not use the extension as a replacement for official grades or teacher guidance.
Changes
We may update this policy as the extension changes. The effective date above indicates the latest version of this policy.
Contact
Questions or deletion requests can be sent to support@codegraph.cc.