Privacy Policy for QuackTask

Effective Date: 3/9/25

1. Introduction

QuackTask ("the Extension") is designed to help Stevens Institute of Technology students sync their Canvas assignments with Google Tasks. This Privacy Policy explains what data is collected, how it is used, and your rights regarding your information.

2. Information We Collect

2.1 Authentication Information

• The Extension uses Google OAuth authentication to connect to your Google Tasks account.
• Your authentication token is retrieved using the chrome.identity API and is stored only on your local device in localStorage.
• We do not collect, store, or share your personal Google credentials, such as passwords.

2.2 Assignment Data from Canvas

• The Extension scrapes assignment data from Canvas using the Better Canvas extension.
• This data includes assignment names, due dates, and course titles, which are only used locally for syncing to Google Tasks.
• No assignment data is sent to external servers or stored beyond the duration of the session.

2.3 Google Tasks Data

• The Extension retrieves your Google Tasks lists and allows you to sync assignments from Canvas into a selected task list.
• No task data is stored or shared externally—Google Tasks is accessed only while the extension is in use.

3. How We Use Your Information

The Extension accesses and processes data only for the purpose of syncing Canvas assignments with Google Tasks. Specifically, we:

• Authenticate with Google using OAuth.
• Retrieve and display your Google Task lists.
• Extract Canvas assignments and filter out completed ones.
• Add selected assignments to Google Tasks upon user request.

4. Data Storage and Security

• Local Storage: OAuth tokens and scraped Canvas data are temporarily stored in localStorage or chrome.storage.local on your device.
• No External Servers: The Extension does not transmit, store, or sell any user data to external services.
• Google API Compliance: QuackTask follows Google’s OAuth and API policies, ensuring secure handling of authentication tokens and task data.

5. Permissions Used

The Extension requests the following Chrome permissions:

• "identity" – To authenticate with Google Tasks.
• "storage" – To store authentication tokens and temporary task data.
• "activeTab" – To access the Canvas page for assignment extraction.
• "scripting" – To inject scripts into Canvas for scraping assignments.
• "host_permissions" – Required for accessing:
  • https://sit.instructure.com/* (Canvas)
  • https://www.googleapis.com/* (Google Tasks API)

6. Third-Party Services

• The Extension requires Better Canvas to properly extract assignment data from Canvas.
• Google Tasks API is used to sync assignments, following Google's privacy and security policies.

7. User Control and Revoking Access

You can revoke Google Tasks access at any time:

1. Logout from the extension (this removes the OAuth token).
2. Revoke access via Google:
   • Go to Google Account Permissions
   • Find QuackTask and select Remove Access.

8. Changes to This Privacy Policy

We may update this policy if the Extension’s functionality changes. Any modifications will be reflected in the latest version of the Privacy Policy.

9. User Consent

By using QuackTask, you signify your consent and agreement to the terms outlined in this Privacy Policy. If you do not agree with this Privacy Policy, please refrain from using the Extension.

10. Contact Information

If you have any questions, feel free to reach out:

Owen Ungaro
oungaro@stevens.edu