What the Lodestar extension can access

The Lodestar Canvas extension is built to see as little as possible. It can't read your other tabs, your browsing history, or any website other than your school's Canvas and Lodestar. You can check every claim below at chrome://extensions → Lodestar Canvas → Details.

Sites it can reach

• Lodestar (lodestarplanner.vercel.app): to sign you in and match the app's light or dark theme.
• Your school's Canvas, only after you approve it. The extension starts with no access to any Canvas. When you click Connect, Chrome asks permission for that one address. If you say no, nothing connects. Switching to a different Canvas removes access to the old one.
• Nothing else. There is no "all websites" permission.

Each permission, and why

• storage: remembers your Canvas address, sign-in token and sync progress on your device.
• alarms: a timer so finished assignments are noticed even when Canvas isn't open.
• activeTab: when you click the Lodestar icon, it can see the address of the tab you're on, so it can offer "Use this Canvas". It does not see other tabs.
• scripting: lets the extension add one tiny script to your connected Canvas only. It tells the extension a Canvas page loaded, so a submission is picked up quickly. It reads nothing from the page.

What leaves your browser

Using your existing Canvas login, the extension reads your active courses, assignments (title, description, due date, points, whether you submitted), discussions and recent announcements, and sends them to Lodestar. It does not send or store your Canvas password or session cookies, grades, submissions, files, messages, or anything from other sites. It only reads from Canvas; it never posts, submits, or changes anything there.

Your controls

• Sign out in the extension popup to revoke its Lodestar sign-in immediately.
• Remove the extension, or Canvas access in chrome://extensions, at any time.
• Hide individual courses from syncing in the popup.

Questions, or a school IT team that wants to review it? Email lodestarplan@gmail.com.