AutoPass 5S Companion Privacy Policy
Effective date: 11/5/2026
Publisher: Raven Ironwing
Contact: ravenironwing@gmail.com
Purpose and intended users
AutoPass 5S Companion is a Chrome extension for teachers and authorized school personnel. It is a companion to the 5-Star Students Hall Passes website to help process student hall-pass requests, maintain a waiting queue, apply teacher restrictions and track pass activity. AutoPass 5S Companion is independently developed and is not affiliated with, endorsed by, or officially supported by 5-Star Students.
Student and staff-related data handled
Depending on what the staff member imports, enters or synchronizes, AutoPass processes student names (including preferred names), student IDs/barcodes, pass requests and types, checkout/check-in timestamps, pass durations, waiting-queue state, No-Pass restrictions and related history or analytics. It also stores school profiles, bell schedules and teacher-selected extension settings. AutoPass uses barcode-scan input on the 5-Star website for its pass workflow. It does not need the teacher's 5-Star account password to be entered into AutoPass.
5-Star Students interaction
5-Star integration is a core part of AutoPass. The extension may open or locate the 5-Star Hall Passes tab and may reload an existing Hall Passes tab after installation or an update to restore scan capture. When verified 5-Star submission is enabled (the default), AutoPass uses the teacher's signed-in 5-Star session to submit pass requests and receive confirmation or rejection. Roster synchronization occurs when a staff member selects Sync with 5-Star; AutoPass requests roster data through that same authenticated website session. The 5-Star service receives the requests and handles them under its own privacy practices and terms.
The Require verified 5-Star submission before signing out setting controls whether a sign-out must be verified by 5-Star. If switched off, a teacher may create local-only sign-out records, but this does not disable the integration, 5-Star tab management or the ability to synchronize rosters.
Where records are stored and secured
AutoPass 5S Companion stores its working records in Chrome extension storage within the user's browser profile. These records are encrypted using AES-256-GCM with a non-extractable encryption key held in that browser profile's IndexedDB. Downloadable JSON backups are encrypted using AES-256-GCM and a password-derived key (PBKDF2-SHA256, 310,000 iterations). The staff member selects and retains the backup password.
AutoPass 5S Companion does not operate a separate cloud database or publisher-controlled service for storing student records. This does not mean data never leaves the browser: authenticated interactions with 5-Star send the information required to process pass or roster requests to that service. Exported backups leave browser storage when downloaded and may be copied or shared by the person handling them.
Data use and sharing
AutoPass 5S Companion uses student and pass information only to provide its hall-pass workflow, local queue, restrictions, records and analytics, and 5-Star interactions. AutoPass 5S Companion itself contains no publisher-operated advertising or analytics data-transfer service identified in the reviewed version. It does not intentionally sell student information or send student records to an AutoPass publisher server. The necessary external service for the integrated workflow is 5-Star Students, accessed through the user's authenticated session. Local backup files may be handled by staff and school IT under their own procedures.
Retention and deletion
Working records remain associated with the browser profile until edited, removed, replaced by a restored backup, or cleared through browser/extension data controls. Uninstalling an extension or removing browser data may make records unavailable; downloaded backup files must be separately deleted from wherever staff saved them. AutoPass's automated class-end and pass-expiration features can end active pass states but should not be described as automatically deleting all historical student records. Schools remain responsible for their applicable retention and deletion rules.
Security limitations and school responsibilities
Encryption helps protect records at rest but does not prevent access by someone already controlling an unlocked Chrome profile. The local encryption key is not portable between browser profiles; keep an encrypted backup and its password in an approved secure location. Only authorized personnel should install AutoPass, access student records, synchronize rosters, or handle exported files. The institution should approve 5-Star integration and evaluate student privacy, school policy and applicable laws before use.
Changes and contact
The publisher may update this policy when the extension or its data practices change. Contact [ENTER CONTACT EMAIL] with privacy questions or requests, subject to school records policies and technical control over locally stored data.