Privacy Policy for Gradescope to Cal

Overview

Gradescope to Cal is a browser extension that automatically syncs your Gradescope assignments to Google Calendar. We are committed to protecting your privacy through a zero-server architecture that processes all data locally in your browser.

Information Collection and Use

What We Collect

• Assignment Data: Assignment titles, due dates, course names, course IDs, assignment URLs, and assignment IDs from Gradescope pages you visit
• Extraction Metadata: Timestamps of when data was extracted, source page URLs, and extraction method used
• Authentication Tokens: Google Calendar OAuth access and refresh tokens stored securely in your browser
• Auto-Sync Data: Timestamps and results of automatic background sync operations
• User Preferences: Sync frequency settings, notification preferences, and auto-sync enable/disable status

What We DON'T Collect

• Personal Information: We do not collect names, email addresses, or any personally identifiable information
• Browsing History: We only access Gradescope.com pages when yous visit them
• Assignment Content: We do not read or store assignment descriptions, submissions, or grades
• Analytics: We do not track usage, collect statistics, or send any data to external servers

Data Storage and Processing

Local Processing Only

• All data processing occurs locally in your browser
• No servers are used to process, store, or transmit your data
• Assignment data is stored only in your browser's local storage
• Authentication tokens are stored securely using browser extension APIs
• Automatic Background Sync: Every 24 hours, the extension checks locally stored assignment data and syncs new items to your Google Calendar - no external data fetching occurs during this process

Data Retention

• Assignment data is retained until you manually clear it or uninstall the extension
• Google Calendar authentication tokens are retained until you disconnect or uninstall
• Auto-sync logs and error data are retained for troubleshooting and automatically cleared periodically
• No data persists after extension removal

Third-Party Services

Google Calendar API

• We use Google's OAuth 2.0 for authentication (industry standard)
• Calendar events are created directly between your browser and Google's servers
• We do not intercept, store, or process your Google account information
• Google's privacy policy applies to your Google Calendar data

Gradescope.com

• We extract publicly visible assignment information from pages you visit
• No login credentials or private data are accessed
• We respect Gradescope's rate limits and terms of service

Data Sharing

We do not share any data with third parties because:

• We operate with zero servers
• All processing happens locally in your browser
• We have no analytics, advertising, or tracking mechanisms
• No data ever leaves your local environment except for direct Google Calendar API calls

Security

Technical Safeguards

• OAuth 2.0 with PKCE for secure Google authentication
• HTTPS-only communication with Google APIs
• Secure browser extension storage for sensitive tokens
• Content Security Policy to prevent code injection

Privacy by Design

• Minimal permission requests (only Gradescope and Google Calendar access)
• No external dependencies beyond Google Calendar API
• Open source codebase available for security review
• Regular security updates through browser extension stores

User Rights and Control

Your Control

• Enable/Disable: Turn automatic sync on/off at any time
• Data Deletion: Clear all stored assignment data and authentication
• Selective Sync: Choose which assignments to sync
• Revoke Access: Disconnect Google Calendar access instantly

Data Portability

• All assignment data is stored in standard formats
• You can export your data through the extension interface
• No vendor lock-in or proprietary data formats

Technical Details for Transparency

Permissions Explained

• storage: Store your preferences and assignment data locally
• identity: Handle Google OAuth authentication
• scripting: Inject content scripts to extract assignment data from Gradescope pages
• activeTab: Access the currently active Gradescope tab for assignment extraction
• alarms: Schedule automatic background sync every 24 hours
• *://*.gradescope.com/*: Access Gradescope pages to extract assignment data
• https://www.googleapis.com/*: Communicate with Google Calendar API

Data Flow

1. You visit Gradescope → Extension extracts assignment data → Stored locally
2. Authentication → Direct connection to Google → Tokens stored locally
3. Sync → Direct API call to Google Calendar → Events created in your calendar

No intermediate servers or third-party data processing

Contact Information

Data Controller: Gradescope to Cal Development Team
Support Email: gradescope.to.cal@gmail.com
Response Time: We aim to respond to privacy inquiries within 7 days

For privacy-related questions or to exercise your rights under GDPR/CCPA, please contact our support email with "Privacy" in the subject line.

Homepage • Terms of Service • Support