Privacy Policy

Effective October 13, 2026 · Version 2

1. Who we are

Aurora for Canvas ("Aurora", "we", "us") is a browser extension that restyles the Canvas learning platform and adds study tools to it. Aurora is an independent project run by an individual developer. It is not affiliated with, endorsed by or sponsored by Instructure (the maker of Canvas), Anthropic (the maker of Claude) or any school.

Contact: willwgrossi@gmail.com

2. Information that stays in your browser

Aurora works inside your browser, using the Canvas login you already have. To build the dashboard, to-do list, grade tools and search, it reads your own Canvas information from your school's Canvas site: your name, courses, assignments, due dates, announcements and grades. This information is kept in your browser only. It is not sent to us, and we cannot see it.

Also stored in your browser:

• Your Aurora settings (colours, layout, course nicknames and so on). If Chrome sync is turned on, Google copies these between your own signed-in devices.
• An invite code or an API key, if you enter one. These are stored on this device only and are never synced.
• A random install ID, made up by Aurora the first time you enter an invite code. It is a random string that identifies this copy of Aurora and nothing else: it is not based on you, your device or your Canvas account. It is stored on this device only and is never synced.
• Your current chat with Claude, kept for the browser tab you are using so the panel can show it. It is cleared when the tab closes.

3. Information sent when you ask Claude

Nothing is sent to Claude unless you ask a question. When you do, Aurora sends:

• your question, and any earlier messages in the same chat;
• your first name, as shown in Canvas or in your Aurora settings;
• only the Canvas information you have switched on under "Claude sees": the page you are on, your to-do list, and/or your current grades;
• any instructions you saved under "Always tell Claude".

Where it goes depends on the option you chose in Settings → Claude:

You can check exactly what would be sent at any time: Settings → Claude → "What Claude gets".

4. What the Aurora server keeps

The Aurora server is used only with the Invite code option. It keeps:

• Your invite code, so it can tell whether you are allowed to use the service.
• The random install ID of the copy of Aurora that first used your invite code, so that a code handed to one person works on one copy of Aurora only. It is sent along with your invite code each time you ask a question. It is kept until the code is switched off or reset.
• A daily message count for each Claude model, linked to your invite code, so daily limits can be applied. Each count is deleted automatically after about two days.

The server does not store or log your questions, Claude's answers, your name, your grades or any other Canvas information.

5. How we use information

We use the information described above only to:

• provide Aurora's features to you;
• apply daily message limits and prevent misuse of the service;
• understand, in total, how much Aurora is used, so we can fix problems and improve it.

We do not sell your information. We do not rent or trade it. We do not use it for advertising or to build a profile of you. We do not use it for any purpose unrelated to Aurora, and we do not use it to decide whether someone qualifies for credit or a loan. If you email us with feedback or a problem, we use your message only to reply and to improve Aurora.

Aurora's use of information follows the Chrome Web Store User Data Policy, including its Limited Use requirements.

6. Other companies involved

We share information only with the companies needed to make Aurora work, and only as described here:

• Anthropic provides Claude. Questions you send are processed by Anthropic to produce an answer, under Anthropic's own terms and privacy policy: anthropic.com/legal/privacy.
• Cloudflare hosts the Aurora server. Like any web host, it handles network details such as your IP address in order to deliver and protect the service: cloudflare.com/privacypolicy.
• Google syncs your Aurora settings between your devices if you use Chrome sync.
• Instructure and your school run Canvas. Aurora reads Canvas using your own login and does not change who can see your Canvas information.

We may also disclose information if the law requires it. We have very little to disclose.

7. Young people

Aurora is not meant for children under 13, and we do not knowingly collect personal information from them. If you are under 18, please use Aurora, and its Claude features in particular, only with the permission of a parent or guardian. If you believe a child under 13 has used the Invite code option, email us and we will remove their invite code, its install ID and its message count.

8. Keeping information safe

Connections between your browser, the Aurora server and Anthropic are encrypted (HTTPS). The API key that pays for the Invite code option is kept on the server and is never placed in the extension. No system is perfectly secure, but we keep as little information as possible so that there is little to lose.

9. Your choices

• Choose what Claude sees with the switches under "Claude sees", and set the defaults in Settings → Claude.
• Turn Claude off entirely in Settings → Claude. The rest of Aurora works without it.
• Remove an invite code or API key with the Remove button in Settings → Claude.
• Delete everything Aurora stored in your browser by removing the extension from Chrome.
• Ask us to delete your invite code, its install ID and its count, or ask what we hold about you, by emailing us. Depending on where you live, you may have legal rights to access, correct or delete your personal information; we will honour such requests whoever you are.

10. Changes to this policy

If this policy changes in a way that matters, we will update the date above and Aurora will ask you to review the new version before you use Claude again.

11. Contact

Questions or requests about privacy: willwgrossi@gmail.com