What it reads, what it keeps, and what it sends: nothing about your students.

On a SpeedGrader page it reads the rubric on screen (the criteria, their score boxes and their comment boxes), the Assignment Comments box, the grade box when the assignment has no rubric, and the current student's first name. The name comes from the page itself. When the page doesn't carry it, the tool asks your own Canvas for the name the same way the page does, using the session you're already signed in to.

It runs only on pages whose address ends in instructure.com and contains SpeedGrader. It reads nothing on any other page. Chrome tells you at install that it can “read and change your data” on instructure.com sites. That's what running on a page means, and this page is everything it does with that.

Everything is stored in your browser's own storage for your Canvas site, beside the storage Canvas uses, on the computer you're using:

• Your Default, per course and assignment: what you saved with Set this as Default. That’s your comment and score for each criterion and your standard assignment comment, or on an assignment with no rubric, the grade and the assignment comment.
• Students' first names it has learned, so it doesn't have to ask Canvas twice, and any “goes by” name you typed.
• Your settings: whether the name goes in, what Fill writes (Top Score or Default), whether the Default's summary is open, where the panel sits and whether it's folded.
• A short log of its own recent actions (lines like “Fill: 4 comments written”), for the diagnostic report. It never logs a student's name or the text of a comment.
• The date the extension first ran, which decides the free period for beta copies once billing opens.
• Once billing opens, and only if you paste a license key: the key, and what Lemon Squeezy last said about it.

Nothing is copied to another computer or synced anywhere. A different computer starts empty.

• To us, nothing. The extension never contacts aibypeak.com. (Versions 0.3.3 to 0.3.10 read a one-line notice from our site when SpeedGrader opened, and a copy Chrome hasn’t updated yet still does. Version 0.3.11 took that out, so no request of any kind reaches us from the extension.)
• To your Canvas: the name lookup above, which is the same request the SpeedGrader page makes itself, to the same place. On a group assignment graded as a whole, it asks your own Canvas who is in the group, in the same way, so it can greet each member by name (version 0.3.7 and later). On an assignment with no rubric, it asks your own Canvas how the assignment is graded (points, percentage, complete or incomplete, or a letter or GPA scale, and for a scale, which grading scheme the assignment or course uses), in the same way, so Top Score can put in the top grade (version 0.3.9 and later).
• To Lemon Squeezy, once billing opens and only if you have pasted a license key: the key itself, once when you paste it and about once a day after that, to check that the key is still good. Two other things go with it: a label made of the word Canvas and the date you pasted the key (so your computers can be told apart), and an identifier Lemon Squeezy gave back the first time. Lemon Squeezy is the company that sells the license, and the name that appears on your receipt and card statement. Its own privacy policy covers what it does with a key it's asked about. While the tool is in beta there are no keys, so this never happens.

Nothing else. No student information, no comment text, no page content and no Canvas address ever leaves your browser through this extension.

Copy diagnostic puts a plain-text report on your clipboard, only when you click it. It describes the shape of the page: which boxes the tool found and which it didn't, its version, your settings, its recent actions, and your Canvas address with the course and assignment numbers. The report says at the top that it carries no student names, no ID numbers and no comment text.

You decide whether to email it to us. If you do, we keep that email the way we keep any other, to fix the problem, and for nothing else.

• Never submits an assessment and never posts a grade.
• Writes nothing to the page until you click Fill.
• Never reads or changes any page outside SpeedGrader.
• Never sends us anything from your Canvas pages, and never contacts anyone except as listed above.

Removing the extension from Chrome stops it at once. What it saved stays in your browser's storage for your Canvas site until you clear that site's data. In Chrome's settings, under Privacy and security, find the site data for your Canvas address and delete it. That also signs you out of Canvas in that browser, so do it at the end of a session, not the middle.

Student names appear only inside your own browser, on a page you're already looking at as their instructor. We never receive them, and there's nowhere for them to go. If your school asks what this extension shares about students, the answer is nothing.

Write to hello@aibypeak.com. We keep the email to answer it. No list. If you asked to be told when billing opens, you get one email when it opens and nothing else.

If what the tool keeps or sends ever changes, this page changes first, with a new date at the top, and the Chrome Web Store listing's privacy disclosures change with it.

Peak is a brand of Mercer & Mason LLC, an Indiana company. hello@aibypeak.com.

Not affiliated with or endorsed by Instructure. Canvas and SpeedGrader are trademarks of Instructure, Inc.