Privacy policy — Better Classroom

The short version

Better Classroom stores the settings you choose and the images you upload. When you sign in, those travel to one server — betterclas.kstudios.games, run by the person who publishes this extension — so they follow you to your other computers.

Nothing is sold, nothing is shared with anyone else, there are no analytics and no advertising. The extension runs on classroom.google.com and nowhere else, and it never reads or sends the content of your classes, your posts or your messages.

What the extension keeps on your computer

Held in the browser's own extension storage, on your device:

Your block list — the names you typed, so posts from those people can be covered.
Your display settings — banner mode, background fit, blur, tint, the pill and sidebar options.
The images you upload — your banners and your page background, kept as encoded images.
Your account, once you sign in — your username and the session token the server issued. Your password is never stored on your computer.
Which plan your account is on — trial or premium, and the dates involved — kept so the extension still works during a short server outage instead of switching itself off.

Uninstalling the extension removes all of it. Signing out removes the token and the plan, and leaves your settings in place.

What is sent to the server, and when

When you create an account or sign in	Your username and password, and an invite code if the server asks for one. The password is checked and then kept only as a scrypt hash — it is never stored in a form anyone can read, including the administrator.
When your settings sync	Your block list, your display settings, and your uploaded banner and background images, as one bundle. This is the same data described above; syncing is what makes it appear on your other computers.
Every so often while signed in	Your session token, so the server can say whether your trial or premium access is still current. Nothing else is sent.
When you redeem a premium key	The key you typed.
When you send a bug report	Only if you type one and press send: your message, the extension version, your browser's user-agent string, which options you have switched on, how many names are on your block list (the number, never the names), and the path of the Classroom page you were on, which includes the class ID.

All of it travels over HTTPS. The extension contacts no other host.

What the server keeps

In one SQLite database on a private server: your username, the hash of your password, when the account was made and last used, which plan it is on, your synced settings bundle, your sessions (each stored as a hash of the token, with its expiry and a short note of the browser it was created in), any invite code or premium key involved, and any bug reports you chose to send.

Your IP address is used momentarily to rate-limit sign-in attempts and is not written to the database. The web server in front of the application may keep ordinary access logs, which include IP addresses, in line with how that server is configured.

The database is kept for as long as your account exists, plus whatever time it takes for backups to age out.

What it never touches

The content of your classes — assignments, posts, comments, grades or files. The extension reads the page to find what to restyle and what to cover, and none of it leaves your computer.
Private messages of any kind.
Your browsing history, or any site other than classroom.google.com.
Your location, your keystrokes, your clicks or your mouse.
Payment details. Premium is unlocked with a key; no card or payment information ever reaches the extension or the server.

Who else sees it

Nobody. Your data is not sold, rented, or handed to any third party, and it is not used for anything beyond making the extension work. There are no analytics services, no advertising networks and no trackers of any kind.

The one person with access is the administrator of the server, who can see accounts, plans and bug reports in the admin panel in order to run the service. Your synced settings bundle and your password are not readable there.

It would only ever be disclosed further if the law required it.

Email addresses

Signing up needs a username and a password — no email address is asked for or stored today. Sign-up by email may be offered later. If it is, the address would be used to sign you in and to let you recover your account, and for nothing else: no newsletters, no marketing, and never passed to anyone. This page will say so plainly before that starts.

What you can do about it

See it — everything about you is either in your browser's extension storage or in your settings bundle, and the extension shows you all of it in its own settings panel.
Stop syncing — sign out, or switch off Sync automatically. Your settings stay on your computer.
Have it deleted — ask the administrator to delete your account. That removes the account, its synced settings and its sessions, permanently.
Remove the local copy — uninstall the extension.

Young users

Google Classroom is used in schools, so some people here will be children. Better Classroom asks for no more from them than from anyone else: a username you choose, a password, and the settings you pick. It collects nothing about who you are, and nothing about your schoolwork. If you are at school, ask a parent or a teacher before making an account.

Changes, and how to reach us

If this policy changes, the date at the top changes with it, and anything that affects what is collected will be said plainly rather than slipped in.

Questions, or a request to delete your account: use 🐞 Report a bug in the extension's settings, or write to contactkstudios@yahoo.com.