Privacy Policy

Canvas-Notion Assignment Sync — Last updated: April 1, 2026

Overview

Canvas-Notion Assignment Sync ("the Extension") is a Chrome extension that synchronizes assignment data from Canvas LMS to a Notion database. This policy describes what data the Extension accesses, how it is stored, and who it is shared with.

Data We Collect

The Extension collects and stores the following data, all provided directly by the user or retrieved from APIs the user has authorized:

• Canvas API token — used to authenticate requests to your Canvas LMS instance
• Notion integration token — used to authenticate requests to the Notion API
• Notion database ID — identifies which Notion database to sync assignments to
• Assignment data — titles, due dates, point values, submission statuses, grades, course names, and assignment descriptions retrieved from the Canvas API
• Notion page IDs — identifiers for synced pages, used to update existing entries instead of creating duplicates

The Extension does not collect any personal information beyond what is listed above. It does not track browsing history, keystrokes, or any activity outside of Canvas LMS pages.

How Data Is Stored

• All API tokens are encrypted using AES-GCM 256-bit encryption with a unique 96-bit initialization vector before being saved to chrome.storage.local.
• Assignment data is cached locally in chrome.storage.local with a 30-day time-to-live. Expired entries are automatically removed.
• All data is stored entirely on your device. No data is sent to any server operated by the Extension developer.

Third-Party Services

The Extension communicates with two external services, both at the explicit direction of the user:

• Canvas LMS API (*.instructure.com) — to retrieve course and assignment data using your Canvas API token
• Notion API (api.notion.com) — to create, update, and query pages in your Notion database using your Notion integration token

The Extension does not send data to any other third-party service, analytics provider, or advertising network.

Data Retention and Deletion

• Cached assignment data expires automatically after 30 days.
• You can delete all stored data at any time by clicking "Clear All Data" in the Extension's settings panel.
• Uninstalling the Extension removes all locally stored data.

Permissions

The Extension requests the following Chrome permissions:

• storage — to persist encrypted credentials and cached data
• activeTab — to interact with Canvas LMS pages
• scripting — to inject the content script into Canvas pages
• alarms — to run periodic background syncs (every 30 minutes)
• notifications — to display sync status notifications
• Host access to *.instructure.com and api.notion.com — to communicate with the Canvas and Notion APIs

Children's Privacy

The Extension is not directed at children under the age of 13 and does not knowingly collect personal information from children.

Changes to This Policy

If this privacy policy is updated, the revised version will be posted at this URL with an updated date. Continued use of the Extension after changes constitutes acceptance of the revised policy.

Contact

If you have questions about this privacy policy, please open an issue on the GitHub repository.