Privacy and cookies

Account and material

We process your email, password hash, name, university, programme, semester and course mappings to provide your account and the features you request. Passwords are not stored in plain text. The legal basis is GDPR Article 6(1)(b) for the account service and requested optional features. Necessary security and troubleshooting rely on Article 6(1)(f). Security information may include event times, account identifiers, IP addresses and technical client information.

StudieSync is hosted by Contabo GmbH in Germany (EU). StudieSync does not transfer data outside the EU/EEA from its server. Material you choose to synchronise to Google is processed in your own Google account under Google’s terms. Google is the other provider used by this service; Google Drive and calendar are optional. The current service uses no third-party analytics, advertising tracking, email provider or other third parties. Our own measurement of usage and errors is described under “Measuring usage and errors”.

Managed course material and Canvas metadata create and update sources in your private Google notebook. The extension downloads material from StudieSync and sends it to Google using your own browser session. The extension does not send Google sign-in credentials to StudieSync. Local extension storage includes the StudieSync access token, course/notebook mappings, sync history and content versions. We do not collect your general browsing history.

If you use the PDF workspace, uploaded documents and their text are stored privately on the server and do not become shared course sources. Data is transmitted over HTTPS. StudieSync does not sell personal data or use it for advertising. Use and transfer follow the Chrome Web Store User Data Policy, including Limited Use requirements.

We may write to you in the app under Messages about the service and to reply to your requests. We do not send advertising or emails unless you have agreed.

Sync status

After a sync, StudieSync only receives confirmation of which course files were transferred to your notebook. StudieSync never reads your personal notes, chats, or own files in the notebook. Information on transferred files is stored for up to 30 days to display your status.

Preferences and interest

Cookies and choices

The necessary login session and form protection support your account. Cookie preferences are remembered in studiesync_cookie_consent for up to a year; language is stored in the session. Choices can be changed in Profile → Cookie preferences. Analytics is optional: only if you have said yes to statistics do we record your usage as described under “Measuring usage and errors”. The measurement uses no cookies, and there is no third-party analytics or advertising tracking.

Measuring usage and errors

To understand how StudieSync is used and to fix errors quickly, we briefly record which parts of the app you open. We do this without reading your content. Usage measurement only happens if you have said yes to statistics in your cookie choice. Error measurement runs regardless of your choice, because it is necessary for operating the service and for fixing errors.

What we record if you have said yes to statistics

• Which part of the app you open (for example Overview, Calendar, To Do, Courses, Messages, Groups, Search, Help, Profile, Study packages) and the time. At most once per part every 10 minutes.
• Whether you use a phone, tablet or computer, and which browser (Safari, Chrome, Firefox, Edge or other). We do not store the browser information itself, only these broad categories.
• When you download a study package, or open the app from a notification.

What we record regardless of your choice

• When the app or your browser hits an error: the error type, where in the code it happened, which page it happened on (only the type of page, for example “course”, not the address), which version of the app was running, whether you use a phone, tablet or computer and which browser (broad categories only), and which account ID it concerned, so we can see how many people are affected. The error text is cleaned of email addresses, long numbers, addresses and anything in quotation marks before it is stored.
• A few events we already store to operate the service: that you have been in the app (at most once every 10 minutes), that a notification was sent, failed or expired, and that a message was read or dismissed. They are deleted after 90 days.

What we never record

• The content of your files, messages, notes, tasks or searches.
• What you type in the app, or file names.
• Your IP address, full addresses (URLs) or anything after a question mark in an address.
• Your exact device or full browser ID.
• No tracking across other websites, and no advertising or third-party analytics tools.

Why
We use it to see which parts are useful, when you use the app and which errors affect you, so we can fix them. Only StudieSync administrators can see the figures.

Cookies
The measurement uses no cookies. We only use your existing cookie choice to know whether you have said yes to statistics.

How long
Usage and error data is deleted automatically after 90 days, and your records are deleted immediately if you delete your account. Error groups without you in them remain as anonymous figures.

Legal basis
Usage measurement is based on your consent (GDPR Article 6(1)(a)). You can withdraw it at any time in Profile → Cookie preferences, and new recording then stops. Error measurement is based on our legitimate interest in operating the service and fixing errors (GDPR Article 6(1)(f)).

Access and deletion

Your account is closed immediately and your server data is deleted. Your files in Google Drive and your own Google notebooks are not deleted.

Account information and private files remain while your account is active until account deletion is completed. Closing an account blocks access immediately; connection revocation and subsequent deletion are performed operationally and may wait for ongoing work. Your Google Drive files and Google notebooks are not automatically deleted. You can revoke StudieSync access in Google/Canvas and uninstall the extension; uninstalling does not close your server account. Security logs and backup copies are not automatically deleted when an account is closed. They are manually reviewed for deletion when no longer necessary for security, troubleshooting or recovery. Contact us about the specific retention. You can also contact us about access, correction, deletion, restriction, objection and applicable portability rights. Where processing relies on consent, it can be withdrawn without affecting the lawfulness of previous processing. You may complain to the Danish Data Protection Agency. Your information is not used for automated decisions with legal effects.

Notifications and daily overview

If you enable notifications, StudieSync stores your device’s push address and encryption keys, a short browser description, language and technical delivery status. We also store your daily overview preferences: on/off, times and content.

The daily overview may contain the course, time and room from your own calendar. It is sent encrypted through your browser’s push service (Apple, Google, Mozilla or Microsoft) and may appear on your lock screen.

You can turn off daily overview in Profile. Profile → Notifications → Turn off deletes the device’s push address. Deleting your account also deletes your push subscriptions and daily overview preferences.