Draft for review. This page describes what MyGradLedger actually does with data today. It has not been reviewed by a lawyer. Fill in the highlighted items, have it reviewed, then remove this box and the noindex tag.

Privacy

Effective [EFFECTIVE DATE] · Questions: [CONTACT EMAIL]

The short version

What we collect

From students

From supervisors (people asked to confirm an activity)

From everyone who visits

How we use it

Who processes data for us

We use these services to operate MyGradLedger. They handle data on our behalf.

ServiceWhat it doesWhat it sees
Google Firebase / Google CloudHosting, sign-in, database, server functions. Data is stored in the United States.Everything in your account.
EmailJSSends verification-request emails and receipts.The supervisor's email address, the student's name and school, the activity name, dates, hours, and description in the email.
AnthropicWrites AI description suggestions and the homepage demo.For a suggestion: the activity name, the supervisor's organization, the description, and start date you entered. It does not receive your name or email. For the demo: the sentence typed into the demo box.
Google Tag Manager and Google AnalyticsSite usage statistics.Page views and interactions, device and approximate location.
Microsoft ClarityAnonymous session recordings and heatmaps to find usability problems.How pages are used. See "Recordings" below.
PostHogProduct analytics and session replay.How pages are used. See "Recordings" below.

MyGradLedger administrators can view and remove content for support and safety reasons.

Recordings and analytics

To improve the site we use Microsoft Clarity and PostHog, which can record how a page is used. In the app, sign-up and onboarding, dialogs, the supervisor confirmation page, and the admin console, all text and everything typed is masked, so a recording shows layout and clicks but not names, activities, or anything you write. The public home page is not masked because it contains no personal information. These tools and Google Analytics may set cookies or similar storage in your browser. [OWNER: confirm whether a cookie notice is needed for your audience.]

Public portfolios

A portfolio is private unless the student publishes it. A published portfolio shows the student's name, school, class year, and only the activities a supervisor has verified, including the supervisor's name, role, and comment. Anyone with the link can see it. The student can unpublish it at any time.

Keeping and deleting your data

Security

Data travels over encrypted connections and is stored with Google Cloud. A supervisor's confirmation can only be created through a secret one-time link, and only our servers can mark an activity verified. No system is perfectly secure, so please use a strong, unique password.

Students and age

MyGradLedger is made for high school students. [OWNER: state the minimum age and any parent or guardian consent you require, and confirm what applies to you under the laws of the places you operate, such as COPPA in the United States.]

Changes

If we change this page in a way that matters, we will update the date above and, for big changes, tell students in the app.

Contact

[CONTACT EMAIL]