Skip to content

Instantly share code, notes, and snippets.

@Turnstyle19320
Last active February 7, 2026 19:29
Show Gist options
  • Select an option

  • Save Turnstyle19320/fbebb6b3c24a4e98f2273aa732016a1b to your computer and use it in GitHub Desktop.

Select an option

Save Turnstyle19320/fbebb6b3c24a4e98f2273aa732016a1b to your computer and use it in GitHub Desktop.

Privacy Policy for PrepPanel

Effective Date: January 2025

PrepPanel is a Chrome extension built for teachers. Everything you enter stays on your device. This policy explains what we process, how we use it, and your rights.

How PrepPanel Works

Local-Only Storage

All classroom data you enter into PrepPanel is saved to chrome.storage.local in your browser profile. This data:

  • Never leaves your device (except as described below for optional real-time sync)
  • Is not transmitted to PrepPanel or any third party
  • Remains under your complete control
  • Is deleted if you clear your browser profile, clear extension data, or uninstall

Optional WebRTC Features

PrepPanel offers two optional features that use WebRTC peer-to-peer technology. Both share the same privacy architecture:

Share to Display — Sync pacing tracker progress in real-time between your teacher dashboard and a classroom display (like a projector or TV).

Remote Clicker — Use your phone as a wireless remote control for the participation lineup. You open a lightweight web page on your phone, enter a room code shown on your private dashboard, and can advance through students, log participation quality, skip, and undo without being at your computer. The remote clicker page does not require login, does not use cookies, and does not store any data on the phone.

How both features work:

  • Uses WebRTC peer-to-peer technology to connect devices directly
  • Data flows directly between your devices — it never passes through our servers
  • Our signaling server only facilitates the initial connection by exchanging technical handshake data (WebRTC offers/answers and ICE candidates)
  • No student names, progress data, or any educational content ever touches our servers
  • Room codes expire automatically after 10 minutes
  • Connection is temporary and ends when you close the session

What the signaling server sees:

  • Random room codes (like "calm-brook-swift-247")
  • WebRTC connection metadata (cryptographic handshake data)
  • IP addresses of connecting devices (standard for any network connection)
  • This metadata is not logged or stored beyond the active session

Information We Process

Teacher-Provided Classroom Data (stored locally only)

All data is entered by teachers—PrepPanel does not collect data directly from students. This includes:

Category Data Elements
Class Setup Section/class names and IDs, student names (as entered by teacher), subject settings
Participation Participation logs (student name, status, timestamp), custom participation statuses
Seating Seating layouts, seat assignments, room objects, saved layouts
Grouping Grouping preferences, grouping rules, ability levels, group outputs
Mastery Tracking Learning objectives, mastery scales, student evidence entries
Pacing Tracker Units, activities, milestones, per-student progress status, notes
Learning Targets Learning targets by subject, discussion prompts
App Settings Theme, zoom, timer presets, UI preferences

What We Do NOT Collect

PrepPanel does not collect:

  • Browsing history or web activity
  • Page content or URLs outside the extension
  • Search queries or keystrokes
  • Device location or GPS data
  • Device identifiers or advertising IDs
  • Usage analytics or telemetry
  • Student email addresses, phone numbers, or home addresses
  • Student demographic data
  • Any data directly from students

How We Use Information

We use information solely to:

  • Operate Features: Provide roster management, participation tracking, seating charts, grouping, mastery tracking, pacing boards, timers, and other classroom tools
  • Facilitate Real-Time Sync: Enable the optional WebRTC peer-to-peer connections for classroom display sync and remote clicker

We do NOT:

  • Store your classroom data on our servers
  • Sell your data or student data to anyone, ever
  • Use data for advertising or marketing
  • Build behavioral profiles or predictive models
  • Share data with third parties for their own purposes

Where Data Is Stored

Location Data Control
Your device (chrome.storage.local) All PrepPanel classroom data You control it completely
Your exported backups JSON files you download Stored wherever you save them
Signaling server (temporary) WebRTC connection metadata only Auto-deleted after 10 minutes

Data Retention and Deletion

  • Local data: Kept until you delete it in Settings, clear your Chrome profile, or uninstall
  • Backups: JSON files you export remain wherever you saved them until you delete them
  • WebRTC session data: Automatically deleted from signaling server after 10 minutes

Deleting Your Data

You can delete your data at any time:

  • Delete specific data: Settings → Delete options for rosters, participation, mastery, pacing
  • Delete all data: Settings → "Reset All Data" or uninstall the extension
  • Questions: Email PrepPanel@gmail.com with subject "Data Deletion Request"

Data Security

Measure Implementation
Local storage Protected by your device and browser profile security
WebRTC connections End-to-end encrypted by default (DTLS/SRTP)
Signaling server TLS 1.3 encryption, Cloudflare infrastructure
No custom servers We do not operate servers that store your classroom data

FERPA, Student Privacy, and Schools

Because PrepPanel stores all classroom data locally on your device and never transmits student data to our servers:

  • No third-party data processing: We don't hold or process student data on your behalf
  • No Data Processing Agreement needed: Your student data never leaves your device
  • Teacher responsibility: You maintain the same level of control and responsibility as any local file on your computer

The WebRTC features (display sync and remote clicker) transmit data directly between your own devices. Our signaling server only facilitates the connection and never sees student information. The remote clicker phone page is a static web page that stores nothing and collects nothing — it simply relays your button presses over the encrypted peer-to-peer channel.

For schools/districts: PrepPanel operates like a local spreadsheet or gradebook file—the data stays on the teacher's device. No FERPA designation or institutional agreement is required because we don't receive or store student data.

Third-Party Services

Service Purpose Data They Receive
Google Fonts Font loading for UI Standard web request logs
Cloudflare Signaling server hosting + remote clicker page hosting WebRTC metadata (no student data); static page serving (no user data stored)

Future Features

We may introduce optional cloud sync features in the future. If we do:

  • It will be strictly opt-in
  • We will update this policy before enabling
  • You will always be able to continue using PrepPanel in local-only mode

Changes to This Policy

We will post updates in this file and on the Chrome Web Store listing and update the effective date. Material changes will be highlighted.

Contact

Questions or requests: PrepPanel@gmail.com

Subject lines for faster routing:

  • "Privacy Question"
  • "Data Deletion Request"
  • "Feature Request"

This policy reflects PrepPanel's current local-only architecture with optional WebRTC real-time sync and remote clicker.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment