Privacy Policy for VU TALK - VU Quiz Firewall Unlocker & Bypasser
1. Information We Collect
We only collect information necessary to provide the functionality of the "VU TALK" extension. This includes:
Local Data: Your VU Student ID, hashed passwords, and academic data (marks, deadlines).
Cloud Data (Firebase): Only if you use the "Live Community" chat feature, your chat messages and user IDs are collected to display in the community.
2. How We Handle and Use Your Data
Local data (credentials) is used strictly to automate your LMS login and fetch your academic results (Marks Summary, Deadlines).
The extension bypasses quizzes/videos on your behalf using your local session.
Chat data is handled strictly to provide the live community interaction feature.
3. Data Storage and Security
Local Storage: Passwords and student IDs are securely hashed using AES-GCM encryption and SHA-256, and are stored only locally on your device using chrome.storage.local.
Cloud Storage: Community chat messages are securely stored in our Firebase Realtime Database.
We implement strict security measures to ensure no unauthorized access to your stored data.
4. Data Sharing and Disclosure
We respect your privacy. We do NOT sell, rent, or share any of your personal or academic data with any third-party companies, advertisers, or organizations. Data is only used within the extension for its core features.
5. User Rights and Data Deletion
You have full control over your data. You can delete your saved accounts and passwords at any time from the "LMS Vault" popup within the extension. Uninstalling the extension will also clear all locally stored data.
For users who choose to enable the Google Calendar Sync feature, the following additional privacy practices apply:
Information We Access: We use the Google Identity API to retrieve your Google Email Address and the Google Calendar API to manage events.
Purpose of Access: Your email address is accessed solely to identify the connected account within the extension's UI. The Calendar API access is used strictly to create, update, and delete academic events (such as quizzes, assignments, and GDB deadlines) fetched from your VU LMS account onto your personal Google Calendar.
Data Retention: We do not store your Google OAuth2 tokens or your calendar events on our servers. All authentication is handled securely through Google's official OAuth2 flow via the Chrome Identity API. Any synchronization state is stored only locally on your device.
Limited Use Disclosure: VU TALK's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use your Google data for advertising, serving ads, or any other purpose outside of academic activity synchronization.
Background Sync: The extension uses the alarms API to periodically check for new LMS deadlines and update your calendar in the background to ensure you never miss a deadline.