Privacy Policy
Effective 25 October 2026 · Applies to the Canvas Hack Extension Chrome extension and canvasquizhack.com
In short: when you ask for an answer, the text and any images of that question leave your browser. They are sent to our servers, where they are processed to generate the answer. We do not store the questions themselves. We do not read pages other than the quiz pages of the sites it supports, and we never collect your password.
1. What the extension can access
The extension runs on Canvas pages - addresses under instructure.com - and on canvas-user-content.com, which is where Canvas hosts images used inside questions. If you turn it on for them, it also runs on your school's own Canvas address, on McGraw Hill Connect and SmartBook assignment pages (ezto.mheducation.com and learning.mheducation.com), on ALEKS question pages (www-aw*.aleks.com, for example www-awa.aleks.com) and on Pearson MyLab and MathXL homework, where it reads Pearson's question player (tdx.acs.pearson.com) inside homework pages on mylab.pearson.com and www.mathxl.com. It does not run on any other website, and it cannot see your activity on other sites.
On a quiz page, it reads:
- The text of each question
- The answer options presented for that question
- Images that form part of a question
2. What is transmitted, and to whom
When you request an answer, the extension sends the question text, its answer options, and any question images to our servers in the United States, where they are processed to generate an answer. Processing is carried out by our own infrastructure and by service providers acting on our behalf. Nothing is sent until you ask for an answer.
Question images are downloaded from Canvas by the extension and converted before being sent, so that our server can read them. This download happens in your browser using your existing Canvas session.
Request this site. If you open the extension on a site it does not support and tap "Request this site", it reads that one page once and sends us the site address and the page layout: the names of its tags, classes and attributes, and the shape of its address. It does not send any text, values or answers from the page. We use it to decide which sites to support next and to build that support. Nothing is sent unless you tap the button.
3. What we store
| Data | Where | Kept for |
|---|---|---|
| Request metadata - question length, number of images, response time, token counts | Our server logs | 30 days |
| Your email address and subscription status, if you subscribe | ExtensionPay and Stripe | While your account exists |
| Subscription state used to unlock the extension | Your browser's local extension storage | Until you uninstall |
We do not store the content of your questions or the answers returned. Our logs record only the measurements listed above. Question content does pass through the systems of the service providers that process it, and is subject to their own retention practices.
4. What we do not collect
- Your Canvas username, password, or login credentials
- Your browsing history, or any page outside the supported quiz pages, except the layout of a page you choose to send with "Request this site"
- Your grades, transcript, or student records
- Payment card details - these go directly to Stripe, never to us
- Anything used for advertising. We do not sell or share data.
5. Services we rely on
- A cloud hosting provider in the United States - runs the server that processes requests
- Service providers - process request content on our behalf to generate answers
- ExtensionPay and Stripe - handle subscriptions and payments
- Site analytics - our own, with no third party. When you open a page on canvasquizhack.com or click one of its buttons, the site sends our server the page path, which button was clicked, which plan you picked, the value of the attribution cookie (cqs_src) that records which channel brought you here, and the random visit ID in the cqs_vid cookie described below. No IP address or device identifier is stored with these events. It is not part of the extension. The site also sets one session cookie, cqs_vid - a random ID for this browser session only, so we can see which pages lead to a purchase; it holds no name or email and is deleted when the browser closes.
6. Your choices
- Stop all data collection by uninstalling the extension, or by withdrawing consent from the extension's settings. Nothing is transmitted unless you request an answer.
- Cancel your subscription at any time from the extension popup.
- Request deletion of your account data by emailing us at the address below.
7. Children
This extension is intended for users aged 13 and over. We do not knowingly collect information from children under 13. If you believe a child has provided us information, contact us and we will delete it.
8. Changes to this policy
If our data practices change, we will update this page and revise the effective date above. Where the change is significant, we will notify users within the extension before it takes effect.
9. Contact
Questions, deletion requests, or privacy concerns: support@canvasquiz.com
Canvas Hack Extension