Canvas Hack Extension

Privacy Policy

Effective 25 October 2026 · Applies to the Canvas Hack Extension Chrome extension and canvasquizhack.com

In short: when you ask for an answer, the text and any images of that question leave your browser. They are sent to our servers, where they are processed to generate the answer. We do not store the questions themselves. We do not read pages other than the quiz pages of the sites it supports, and we never collect your password.

1. What the extension can access

The extension runs on Canvas pages - addresses under instructure.com - and on canvas-user-content.com, which is where Canvas hosts images used inside questions. If you turn it on for them, it also runs on your school's own Canvas address, on McGraw Hill Connect and SmartBook assignment pages (ezto.mheducation.com and learning.mheducation.com), on ALEKS question pages (www-aw*.aleks.com, for example www-awa.aleks.com) and on Pearson MyLab and MathXL homework, where it reads Pearson's question player (tdx.acs.pearson.com) inside homework pages on mylab.pearson.com and www.mathxl.com. It does not run on any other website, and it cannot see your activity on other sites.

On a quiz page, it reads:

2. What is transmitted, and to whom

When you request an answer, the extension sends the question text, its answer options, and any question images to our servers in the United States, where they are processed to generate an answer. Processing is carried out by our own infrastructure and by service providers acting on our behalf. Nothing is sent until you ask for an answer.

Question images are downloaded from Canvas by the extension and converted before being sent, so that our server can read them. This download happens in your browser using your existing Canvas session.

Request this site. If you open the extension on a site it does not support and tap "Request this site", it reads that one page once and sends us the site address and the page layout: the names of its tags, classes and attributes, and the shape of its address. It does not send any text, values or answers from the page. We use it to decide which sites to support next and to build that support. Nothing is sent unless you tap the button.

3. What we store

Data Where Kept for
Request metadata - question length, number of images, response time, token counts Our server logs 30 days
Your email address and subscription status, if you subscribe ExtensionPay and Stripe While your account exists
Subscription state used to unlock the extension Your browser's local extension storage Until you uninstall

We do not store the content of your questions or the answers returned. Our logs record only the measurements listed above. Question content does pass through the systems of the service providers that process it, and is subject to their own retention practices.

4. What we do not collect

5. Services we rely on

6. Your choices

7. Children

This extension is intended for users aged 13 and over. We do not knowingly collect information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

8. Changes to this policy

If our data practices change, we will update this page and revise the effective date above. Where the change is significant, we will notify users within the extension before it takes effect.

9. Contact

Questions, deletion requests, or privacy concerns: support@canvasquiz.com