Privacy & terms
Grades is a personal project made by Alex Peterson, a college student. It is not an official service of your school or of Instructure (Canvas), and isn't endorsed by either.
What Grades stores
- Your account: the name, email, Canvas user ID and time zone from your Canvas profile, and your school's Canvas address, and when the account was created and last used.
- Your Canvas access token, encrypted (AES-GCM) before it is saved. It is used to read your classes, grades, assignments, submissions, comments and announcements from Canvas. The only thing Grades can change in Canvas is your Canvas email-notification settings, and only when that is requested from your own account.
- Things you do in the app: items you check off, your study plan, per-class settings (goals, credits, hidden classes), and your notification choices.
- Daily grade snapshots for the trend lines, and a log of notifications sent to you (kept 60 days).
- Copies of files you submitted that you opened in the app, so previews load fast (kept 30 days).
- Push subscriptions for each device where you turn notifications on.
All of this is kept in Cloudflare Workers KV, separate for each account. Other students can't see your data. Account data stays until the account is deleted.
Cookies and storage on your device
gb_usercookie: keeps you signed in (HttpOnly, secure, up to 400 days, renewed as you use the app). It is strictly necessary.- Browser storage (
localStorage, keys startinggrades:): your last-loaded grades so the app opens instantly, a device key that signs this device back in, your tab and view choices, and similar app settings. A service worker caches the app itself so it opens offline.
There are no analytics, advertising or tracking cookies, so there is no cookie banner. Settings → “Clear saved data on this device” removes the browser storage.
Services Grades uses
- Cloudflare hosts the app and its storage, and keeps short-lived server logs (such as errors and request details) for running it.
- Canvas (Instructure), at your school's Canvas address, is where your grades come from. Grades talks to it directly over HTTPS.
- cdnjs (Cloudflare) serves the PDF and Word viewers (PDF.js, Mammoth) when you open a submitted file.
- Push services (Apple, Google, Mozilla or Microsoft, depending on your device) deliver notifications if you turn them on.
Grades doesn't sell or share your information with anyone else.
Your choices
- Turn notifications off at any time in the app (Notifications → Turn Off) or in your device settings.
- Sign out, or “Sign out everywhere” to cut off every device and key on your account.
- Revoke the token in Canvas (Account → Settings → Approved Integrations); Grades then can't read Canvas any more.
- To delete your account and everything stored for it, contact [CONFIRM: contact email].
Children
Grades is for students whose school uses Canvas, and isn't meant for children under 13.
Terms of use
- Grades shows what Canvas reports plus its own calculations (GPA, forecasts, “what you need”). These can be wrong or out of date. Canvas and your instructors are the official record — check there before relying on a number.
- Only connect your own Canvas account, and follow your school's rules for your account.
- The app is provided as is, free, with no guarantee it will always be available.