QuizFetch Privacy Policy

1. Data collected by the browser extension

When the extension is active on a supported Canvas course or quiz page, it may collect:

• Quiz material: course ID and name, quiz ID and title, assignment ID, question text, question type, answer choices, and capture timestamps.
• Answer information when it is available from the Canvas quiz or results page, including your selected answers, correct or incorrect answers, and text-answer results.
• Canvas contributor information sent with a normal cloud sync: the Canvas numeric user ID and the display name returned by Canvas. This supports contributor records, moderation, and aggregate usage counts.
• Extension settings and local usage counters, such as onboarding status, consent status, captured-question counts, course IDs, and interaction counts. These are stored locally and are not sent as analytics by the extension.

The extension does not collect general browsing history. It reads supported Canvas pages for its capture feature. Its optional “Search on QuizFetch” context-menu feature sends only the selected question text, or the question text under the user's explicit right-click action, to perform that search.

Quiz content can contain personal, educational, or other information placed in a quiz by an instructor or institution. Only use QuizFetch where you are allowed to capture and share that material.

2. Data collected by the web dashboard

If you create or use a QuizFetch account, the website may collect:

• Your account email address and authentication data handled by Supabase Auth. QuizFetch application code does not log or intentionally store your plaintext password.
• Essential session cookies used to keep you signed in and enforce account security.
• Search queries, result counts, reports, and related account activity needed for search, support, moderation, and abuse prevention.
• A browser-generated device identifier, user-agent information, IP address, and sign-in activity timestamps used to secure sessions and manage active devices.
• Aggregate website usage and performance information collected through Vercel Web Analytics. This is used for the website's operation and improvement, not for personalized advertising.

3. How QuizFetch uses data

QuizFetch uses collected data only to provide, secure, and improve its study-tool purpose:

• Store captured material locally so you can review, export, and manage it.
• Add question material and course/quiz context to the shared QuizFetch question library and keep it searchable across devices through the extension's normal cloud sync.
• Display question content, choices, answer information, course context, and aggregate capture activity to approved dashboard members.
• Maintain account sessions, prevent abuse, troubleshoot failures, respond to reports, and administer memberships and support requests.

QuizFetch does not sell user data, use captured quiz data for personalized ads, or transfer it to data brokers or information resellers. The current production configuration does not send captured quiz data to Discord or another community webhook.

4. Storage and sharing

Local captures are stored in the browser's local storage and IndexedDB for the Canvas origin. Clearing the extension's browser site data, clearing the stored QuizFetch data, or using the extension's export/import tools affects local copies only; an exported file is under your control.

When the extension syncs captured data, the following parties receive data:

• Supabase: QuizFetch's database, authentication, and API provider. It receives synced quiz material, contributor records, account data, search/activity data, and security records needed for the services. See Supabase's privacy policy.
• Vercel: the hosting and web-analytics provider for the QuizFetch dashboard. It may process website requests, technical logs, and analytics data needed to serve and improve the site. See Vercel's privacy policy.
• Approved QuizFetch members: they can search and review question content, choices, course names, and quiz titles in the shared study library. Canvas contributor IDs and names are not part of the normal member search view.
• QuizFetch administrators: authorized administrators may access contributor IDs/names, account emails, device/security records, search activity, reports, and audit records for moderation, support, and service administration.
• Support providers: if you contact us through Telegram or GitHub, those services receive the information you choose to submit under their own privacy policies. QuizFetch does not automatically send captured quiz data there.

Canvas is the source system for the pages the extension reads; QuizFetch does not receive your Canvas password. If you invoke “Search on QuizFetch” while signed in, the extension reads the QuizFetch session cookie only to refresh and use your session token with Supabase for that search. Authentication tokens are not shared with advertisers or unrelated services.

5. Consent and your choices

• During onboarding, “No thanks” records that you do not consent to the optional community-sharing feature. That choice is stored locally and does not disable the extension's normal cloud sync.
• Normal cloud sync is separate from the onboarding community-sharing choice. The current extension does not provide a cloud-sync switch in its popup; contact us if you need help with a data or account request.
• You can clear locally stored captures through browser site-data controls or by uninstalling/clearing the extension's stored data.
• The context-menu search runs only after you invoke it. You can avoid sending selected text by not using that feature.

6. Retention and deletion

Local data remains until you clear it or it is removed by the browser. Cloud-synced question material is retained in the shared library while it is needed to provide the service; there is no automatic deletion when you uninstall the extension. Account, activity, device, and audit records are retained as needed for account security, support, moderation, and legal obligations.

To request deletion of cloud-synced material, a contributor record, or a QuizFetch account, contact us using the details below. Because question material may be part of a shared library, we may need to remove or de-identify related records rather than delete a shared question immediately. We will review each request and explain any limitation.

7. Security

QuizFetch sends cloud and account data only over HTTPS to the configured Supabase and QuizFetch web endpoints. Supabase session cookies and tokens are used for authentication and are not intended for public disclosure. No online service can guarantee absolute security, so do not sync material you are not permitted to share.

8. Changes to this policy

We may update this policy when the product's data practices change or when the service requirements change. The “Last updated” date will identify the current version. Material changes to cloud data practices will be disclosed in the extension or website before the changed collection begins where reasonably practical.

9. Contact

For privacy questions, consent withdrawal, account closure, or deletion requests, contact @deihahaha on Telegram or open an issue on the QuizFetch GitHub repository. Do not include passwords, authentication tokens, or private quiz content in a public issue.