Privacy Policy
Veracross Companion
Last Updated: January 2025
Overview
Veracross Companion is a browser extension that enhances the Veracross student portal experience. This document describes what data we collect, how we use it, and your rights regarding your data.
Key Principle: Veracross Companion is designed to be privacy-first. All data is stored locally on your device by default.
Data We Collect
Data Stored Locally
All user data is stored in your browser's local storage (chrome.storage.local and chrome.storage.sync).
This data never leaves your device unless you explicitly create an account and enable cloud sync.
1. User Preferences
- What: Feature toggles (e.g., enable checkboxes, custom assignments)
- Why: To remember your settings across browser sessions
- Where: Browser local storage only (unless cloud sync is enabled)
2. Custom Assignments
- What: Assignments you create manually (title, due date, class name, description)
- Why: To display your custom assignments alongside native Veracross assignments
- Where: Browser local storage (synced to cloud if account is created)
3. Completion State
- What: Which assignments you've marked as complete (checkbox state)
- Why: To persist your progress tracking across sessions
- Where: Browser local storage (synced to cloud if account is created)
Data Collected When You Create an Account
If you choose to create a Veracross Companion account (optional), we collect:
- Email Address: Used for account authentication and communication
- Password: Hashed and stored securely on our servers (never stored in plain text)
- User ID: A unique identifier associated with your account
Data Synced to Cloud (Optional)
If you create an account and enable cloud sync, the following data is stored on our servers:
- User preferences (feature toggles)
- Custom assignments you create
- Assignment completion states
Cloud sync is opt-in only. You can use the extension fully without creating an account.
Telemetry Data (Anonymized)
We collect anonymized telemetry data to improve the extension:
- Event types (e.g., "sync_started", "sync_success") — no personal identifiers
- Performance metrics (render time, sync latency) — anonymized
- Error categories — for debugging purposes only
This data contains no personal information and cannot be used to identify you.
Payment Information
If you subscribe to Veracross Companion Cloud, payment processing is handled by Stripe, a trusted third-party payment processor. We do not store credit card numbers or payment details. Stripe handles all payment data according to their privacy policy.
Data We Do NOT Collect
- ❌ No Veracross credentials (passwords, tokens)
- ❌ No Veracross data (grades, schedules, native assignments) — we only read page content to inject features
- ❌ No browsing history outside of Veracross domains
- ❌ No location data (except IP addresses logged by our servers for security purposes)
- ❌ No health information
- ❌ No personal communications
How We Use Data
All data collected is used solely to provide the extension's features:
| Data Type | Purpose |
|---|---|
| User Preferences | Enable/disable features based on your choices |
| Custom Assignments | Display your assignments in the Veracross interface |
| Completion State | Show checkmarks on assignments you've completed |
| Account Information | Authenticate your account and enable cloud sync |
| Telemetry | Improve extension performance and reliability |
Data Storage & Security
Local Storage
- All data is stored using
chrome.storage.localandchrome.storage.syncAPIs - Data is encrypted at rest by your browser
- Data may sync across your Chrome instances if you're signed into Chrome (handled by Google Chrome, not Veracross Companion)
Cloud Storage
- Data synced to cloud is stored in a secure PostgreSQL database
- All data is encrypted in transit using HTTPS
- Passwords are hashed using bcrypt before storage
- Access to cloud data requires authentication via JWT tokens
Permissions Used
| Permission | Reason |
|---|---|
storage |
To save your preferences and custom assignments |
*://*.veracross.com/* |
To inject features into Veracross pages |
Data Sharing
We do not share your data with third parties, except:
- Stripe: For payment processing (if you subscribe) — Stripe handles payment data according to their privacy policy
- fdback.io: For user feedback collection (if you choose to provide feedback) — only your email is shared for authentication
We do not sell your data to advertisers or data brokers.
Data Retention
- Local data: Retained until you uninstall the extension or clear browser data
- Cloud data: Retained until you delete your account or request data deletion
- Account data: Retained until account deletion
Your Rights
You have full control over your data:
View Your Data
- Open browser DevTools → Application → Storage → Extension Storage (for local data)
- Access your dashboard at the extension's Options page (for cloud data)
Delete Your Data
- Local data: Uninstall the extension or clear browser data
- Cloud data: Delete your account via the dashboard or contact us
Export Your Data
Data export feature is planned for a future release. Contact us if you need to export your data now.
Veracross Data
What We Access
Veracross Companion reads (but does not store or modify) the following from Veracross pages:
- Assignment names and due dates (to identify where to add checkboxes)
- Class names (to categorize custom assignments)
- Page structure (to inject UI elements)
What We Don't Do
- ❌ We never store your Veracross data
- ❌ We never modify your Veracross data
- ❌ We never access your grades or personal information from Veracross
- ❌ We never send Veracross data to our servers
Children's Privacy (COPPA)
Veracross Companion may be used by students under 13. We comply with COPPA by:
- Not collecting personal information from children without parental consent
- Allowing local-only usage without account creation
- Providing clear privacy disclosures
If you are under 13, please do not create an account without parental permission.
Changes to This Policy
We may update this privacy policy as the extension evolves. Significant changes will be:
- Announced in extension update notes
- Reflected in the "Last Updated" date above
- Notified via email if you have an account
Contact
For privacy questions or concerns:
- Email: [email protected]
- Visit the extension dashboard for support options