Zax Upgrades — Privacy Policy
Last updated: Oct 16, 2026
Applies to: Cyber Kit for Connexus Chrome extension, version 3.3.2 and later
Published by: Zax Upgrades · ZaxUpgrades@gmail.com
The short version. Cyber Kit reads a student ID that is already on your screen, builds a Connexus link from it, and opens that link in a tab. No student information is ever sent to us or to anyone else. We operate no server that receives your data, we run no analytics, and we sell nothing to anybody.
The only time Cyber Kit contacts an outside service is to check whether your subscription is active. That check contains no student data. Details below.
What Cyber Kit stores, and where
Everything Cyber Kit saves is stored by your own browser. We never receive a copy.
Which page types you have enabled Chrome sync
Gradebook, Attendance, Planner and so on.
Your saved profiles Chrome sync
Named sets of page toggles you switch between.
Custom page URLs you add Chrome sync
Any extra page templates you have created.
Per-site rules Chrome sync
The site names you have set rules for, such as docs.google.com.
Display preferences Chrome sync
Theme, animations, and whether pages open as tabs or windows.
School site licence key, if you entered one Chrome sync
Contains a school name and an expiry date only.
Usage counts stays on device
Double-clicks, total pages opened, and per-page totals.
Your five most recent student IDs stays on device
Used to offer them as shortcuts in the popup. See below.
Whether your subscription is active stays on device
A simple yes/no flag.
"Chrome sync" means Chrome's own settings sync, under your personal Google account. If you have Chrome sync switched on, these preferences follow you between your computers the same way your bookmarks do. That is a transfer between you and Google, governed by Google's privacy policy. Zax Upgrades has no access to it.
About the address of the page you are on
When you open the Cyber Kit popup, it reads the web address of your current tab to work out the site's name (for example docs.google.com). This is used for one purpose: to show the per-site controls for that site, and to save a per-site rule if you create one.
Only the site name is kept, and only for sites where you have deliberately set a rule. The full address, the page content and your browsing history are never stored and never transmitted anywhere.
About the recent student IDs
Cyber Kit keeps the last five student IDs you double-clicked, so the popup can offer them as shortcuts. This is the only student-identifying information Cyber Kit stores at all.
It is kept in local device storage only and is never synced to any account.
It holds ID numbers only — no names, grades, records or any other student information.
It never leaves your computer and is never transmitted to us or any third party.
You can erase it at any time: open Cyber Kit and go to Help & Info → Stats → Reset Stats.
Uninstalling Cyber Kitw deletes it along with all other stored data.
What Cyber Kit never does
We do not collect, receive, store or have any access to your data.
We do not use analytics, telemetry, tracking pixels or advertising networks.
We do not sell, rent, trade or share data with anyone, for any purpose.
We do not build profiles of users, read your browsing history, or record which pages you visit.
We do not read page content. Cyber Kit looks only at the text you deliberately double-click, and only to find a 7-digit number in it.
We require no account, login or registration to use the free version.
Student data and FERPA
Cyber Kit is a navigation shortcut, not a data processor.
It does not receive, retain or redisclose education records. When you double-click an ID, Cyber Kit constructs a Connexus web address and opens it. Your browser then loads that page using your own existing Connexus login. Cyber Kit has no Connexus credentials, no session of its own, and no ability to reach student data independently of you.
Because no education records are ever disclosed to Zax Upgrades, we do not act as a "school official" with access to personally identifiable information under FERPA (34 CFR § 99.31(a)(1)). We are nevertheless happy to sign a school or district student-data-privacy agreement on request.
Payments and subscriptions
This is the one place Cyber Kit communicates with an outside service, so we want to be precise about it.
Cyber Kit uses ExtensionPay (extensionpay.com) to manage subscriptions, which in turn uses Stripe to process payments.
What is transmitted: to find out whether your subscription is active, Cyber Kit asks extensionpay.com about a randomly generated account identifier that ExtensionPay created for your browser. This happens when the extension starts and periodically thereafter. This request contains no student data, no page content and no browsing information — only that random identifier.
If you subscribe: you enter your email address and payment details on ExtensionPay's and Stripe's own pages, not inside Cyber Kit. Cyber Kit never sees, handles or stores your card details. Your email is held by ExtensionPay and Stripe so they can manage your subscription and send receipts.
ExtensionPay privacy policy: extensionpay.com/privacy
Stripe privacy policy: stripe.com/privacy
You can manage or cancel your subscription at any time from Help & Info → Manage Subscription in the extension.
School site licences do not involve ExtensionPay at all. A licence key is verified mathematically inside your own browser, with no network request and no server, and identifies only the school and an expiry date — never an individual.
School-managed installations
If your school deploys Cyber Kit through the Google Admin console, your administrator may supply a site licence key as a managed policy. Cyber Kit reads that key to unlock the full version for staff.
The key contains only your school's name and a licence expiry date. It contains no personal information about you, and Cyber Kit sends no information back to your administrator, to us, or to anyone else.
Permissions, and why each one exists
Permission
Why Cyber Kit needs it
Storage
Saves your settings, profiles and custom pages on your own device.
Tabs / Windows
Opens the student pages you asked for, as tabs or windows.
Scripting
Installs the double-click listener into pages, so the feature works without you reloading every tab after an update.
Clipboard read
Powers Bulk Open. When you click Bulk Open, Cyber Kit reads your clipboard at that moment to find student IDs. It never reads your clipboard at any other time.
Access to websites
(*://*/*)
Staff see student IDs in many places — Connexus, Google Sheets, Gmail, Google Chat, district tools. Cyber Kit must be able to notice a double-clicked ID wherever it appears. It reads only what you double-click and never transmits page content.
Keeping and deleting your data
Because we never receive your data, there is nothing for us to retain or delete on your behalf. You are in full control:
Clear usage stats and recent IDs: Help & Info → Stats → Reset Stats
Remove a custom page or profile: delete it in the Cyber Kit popup
Remove everything: uninstall Cyber Kit. Chrome deletes all of its stored data.
Subscription data held by ExtensionPay/Stripe: email ZaxUpgrades@gmail.com and we will have it deleted, subject to the financial records they are legally required to keep.
Children's privacy
Cyber Kit is a workplace tool intended for school staff, not for students or children. We do not knowingly collect information from anyone, including children under 13.
Changes to this policy
If this policy changes materially, we will update the date at the top and note the change in the extension's release notes. Continuing to use Cyber Kit after an update means you accept the revised policy.
Contact
Questions about privacy, or a school data-privacy agreement to review:
ZaxUpgrades@gmail.com
Cyber Kit is an independent tool published by Zax Upgrades. It is not affiliated with, endorsed by, or sponsored by Pearson Education or Connections Academy. Connexus is a trademark of its respective owner.