ND Studio

Privacy policy

Canvas Teacher Toolkit privacy policy

Last updated: October 11, 2026

Canvas Teacher Toolkit ("the extension") is a browser extension that adds teaching tools to the Canvas LMS. It is published by ND Studio LLC, a Colorado limited liability company ("we", "us"). This policy covers both the free edition and the Premium edition, and explains what the extension does and does not do with your data.

The short version: We run no server for the extension, and we never receive student information. Your settings and student accommodation records stay on your own computer, in your browser. Everything the extension reads or writes in Canvas goes directly between your browser and your school's Canvas site, using your existing login. The only data that ever leaves your device for anyone other than Canvas is a license check in the Premium edition: your license key and a random device ID, sent to our payment provider, Lemon Squeezy. There are no analytics, no tracking, and no advertising, and we never sell data.

What the extension stores on your computer

The extension saves your settings and content in your browser's local extension storage so they persist between sessions. Depending on the features you use, this can include:

  • Your preferences: dark mode on/off, your chosen dark mode style, and which panel features are turned on.
  • Your feedback-bank comments, SpeedGrader quick emojis, late-penalty rules, assignment setup presets, and badge-set definitions.
  • Your class schedule, holiday dates, and grading-period labels, plus due-date settings such as the extra days you give each course section.
  • Student accommodation records you choose to enter: student name, class period(s), whether the student has a 504 plan and/or IEP, the accommodation details you type, paste, or import, and any extended-time setting.
  • Any custom Canvas web address you add in Settings.
  • Premium edition only: your license key and the random device ID created when you activate it.

This data is stored only on the device where you entered it and is never uploaded by the extension. If you use "Export all data" or "Export 504/IEP list" in Settings, the file is saved wherever you choose, and you are responsible for keeping it secure. "Bulk import students" and "Import 504/IEP list" read the text or file you provide on your own device; nothing is uploaded.

A note on student, 504, and IEP information: Accommodation information is sensitive and may be protected by laws such as FERPA and IDEA. The extension keeps it on your device and never sends it to us or to Lemon Squeezy. You control what you enter, where any exported file is saved, and who can use your computer and browser profile. Treat exported files as confidential student records.

What the extension does inside Canvas

When you use a feature, the extension acts for you inside Canvas through your current, already signed-in Canvas session. Depending on the feature, it may:

  • Read the page you are viewing, your course roster and sections, course files, and assignment and submission information through Canvas's own API, for example to flag accommodated students, match badge images, or find missing work.
  • Write changes you explicitly trigger: inserting or restyling page content, setting grades, comments, and rubric scores, setting due dates and student or section date overrides, applying assignment settings, publishing or unpublishing items, and sending Canvas messages that you review or confirm first.

These actions happen only when you click the matching button, and they go directly to your school's Canvas servers. The extension does not send this information to us or anyone else.

Premium license and payments

If you buy the Premium edition, your purchase is processed by Lemon Squeezy, which acts as the merchant of record. To confirm your subscription, the extension sends Lemon Squeezy only your license key and the random device ID, when you activate the key, occasionally afterward to confirm the subscription is still active, and when you deactivate a device. No names, email addresses, Canvas data, student information, grades, or browsing activity are included.

Lemon Squeezy handles your payment and billing details under its own privacy policy. As the seller, we can see the purchase records Lemon Squeezy provides (such as your name, email address, country, and subscription status), and we use them only to manage your subscription, answer support requests, and meet our tax and legal obligations. We never sell them. The free edition makes no outbound connections other than to your Canvas site.

Permissions the extension requests, and why

  • Storage: to save your settings and content locally.
  • Scripting: to load the toolkit on any custom Canvas web address you add in Settings.
  • Alarms and Notifications: for the optional weekly accommodation-outreach reminder, only if you turn it on.
  • Access to Canvas sites: the toolkit runs on *.instructure.com. Any other Canvas address is added only when you enter it and approve the browser prompt, and you can remove it at any time.
  • Access to api.lemonsqueezy.com (Premium edition only): used solely for the license check described above.

The extension does not request access to your browsing history, bookmarks, other websites, camera, microphone, or location.

Data sharing

We do not sell, rent, or share your data. The extension uses no analytics, no tracking, and no advertising. The only third party involved is Lemon Squeezy, and only for Premium licensing and payments as described above.

Your control

You can view, edit, export, and delete everything the extension stores from its Settings page. "Clear all data" permanently erases it from that device, and removing the extension from your browser also removes its local storage. To ask about or delete your purchase records, email us at the address below.

Children's privacy

The extension is a tool for teachers. It is not directed to children and does not knowingly collect information from children. Any student information is entered by the teacher and stays on the teacher's device.

Changes and contact

If this policy changes, we will update the "Last updated" date above and post the new version on our website and store listings. Questions or requests: ND Studio LLC, gamerdevguild@gmail.com, 1500 N Grant St, Ste R, Denver, CO 80203.