Privacy Policy
Last Updated:
1. Introduction
This Privacy Policy describes how the WashU Schedule Builder website and Chrome extension ("we", "our", or "the service")
collects, uses, and protects your information. We are committed to protecting your privacy and ensuring transparency about
our data practices.
2. Information We Collect
2.1 Website (Schedule Builder)
The website operates entirely in your browser and does not collect or transmit any personal information. We collect:
- No personal data: The website does not require registration, accounts, or any personal information.
- Local storage only: Your schedule preferences, wishlist, and bookmarked schedules are stored locally in your browser using localStorage. This data never leaves your device.
- Course data: The website fetches publicly available course information from our servers to display course listings and schedules.
2.2 Chrome Extension
The Chrome extension collects minimal data necessary for functionality:
- Access codes: If you enter an access code, it is stored locally in your browser using Chrome's storage API. The code is verified against our Supabase database but the code itself is stored only on your device.
- Authorization status: Whether you have entered a valid access code is stored locally to remember your authorization state.
- Extension settings: Your preferences for auto-registration timing and other extension features are stored locally.
- No browsing history: We do not collect, store, or transmit your browsing history or any personal information from websites you visit.
3. How We Use Your Information
3.1 Website
- To provide schedule building functionality
- To remember your preferences and saved schedules (stored locally only)
3.2 Chrome Extension
- To verify access codes against our database (one-time verification)
- To remember your authorization status
- To enhance Workday pages with additional features (professor ratings, auto-registration)
- To block unnecessary network requests on Workday pages for improved performance
4. Third-Party Services
4.1 Supabase
We use Supabase to verify access codes. When you enter an access code:
- The code is sent to Supabase for verification
- If valid, the code is marked as used in our database
- No personal information is transmitted to Supabase
- Supabase's privacy policy applies to their handling of this data: https://supabase.com/privacy
4.2 Rate My Professor
The extension may fetch professor ratings from Rate My Professor (ratemyprofessors.com) to display ratings on Workday pages.
This is done directly from your browser to Rate My Professor's servers. We do not collect or store this information.
4.3 Workday
The extension interacts with Workday pages to provide enhanced functionality. All interactions occur locally in your browser.
We do not collect, store, or transmit any data from Workday.
5. Data Storage and Security
5.1 Local Storage
All user data (schedules, preferences, access codes) is stored locally in your browser using Chrome's storage API or
browser localStorage. This data:
- Never leaves your device
- Is not transmitted to our servers
- Can be cleared by you at any time through browser settings
5.2 Server-Side Data
Our servers only store:
- Access codes (for verification purposes)
- Whether an access code has been used (to prevent reuse)
- Public course data (course listings, schedules, descriptions)
No personal information or user data is stored on our servers.
6. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:
- Legal requirements: If required by law or to protect our rights
- Service providers: We use Supabase for access code verification, subject to their privacy policy
7. Your Rights and Choices
7.1 Access and Deletion
You have the right to:
- Clear all local data stored by the extension or website through your browser settings
- Uninstall the extension at any time
- Stop using the website at any time
7.2 Browser Settings
You can manage extension permissions and data through Chrome's extension settings:
- Go to
chrome://extensions
- Find "Workday Auto Register"
- Click "Details" to manage permissions
- Click "Remove" to uninstall and clear all data
8. Children's Privacy
Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from
children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated"
date at the top of this page. Your continued use of the service after any changes constitutes acceptance of the updated policy.
10. Contact Us
11. Additional Information
11.1 Extension Permissions
The extension requires the following permissions:
- Storage: To save your preferences and authorization status locally
- Scripting: To enhance Workday pages with additional features
- Active Tab: To interact with Workday pages you visit
- Alarms: To schedule auto-registration at specific times
- Tabs: To detect when Workday pages are loaded
- Declarative Net Request: To block unnecessary network requests for improved performance
- Host Permissions: To access Workday, Rate My Professor, and Supabase services
11.2 Network Requests
The extension makes the following network requests:
- To Supabase: For access code verification (only when you enter a code)
- To Rate My Professor: To fetch professor ratings (only when viewing professor information)
- To our servers: To fetch course data (website only)
All requests are made directly from your browser. We do not proxy or intercept these requests.
11.3 Data Retention
- Local data: Stored until you clear browser data or uninstall the extension
- Access codes: Stored in Supabase until manually deleted by administrator
- Used code records: Retained to prevent code reuse
This privacy policy is effective as of the date listed above. By using our service, you agree to this privacy policy.