Privacy policy

• Account: your email address and a hashed password, if you create an account. If you try the planner without one, we store a random ID instead.
• Profile: your majors and minors, catalog year, graduation year, degree length, and the requirement checkboxes you tick in the audit.
• Plan: the courses and placeholders in each quarter, and each course's status (planned, in progress or completed).
• Prior credit: AP exams and scores, transfer courses and other credit you enter.
• Schedules: the class sections you save for a quarter.
• Grades: only if you turn on “Import grades” when importing a transcript. It is off by default.

We don't ask for your NetID, student number or UW password, and the site never signs in to any UW system on your behalf.

You can use the planner as a guest. Your plan is stored under a random ID and tied to your browser by a sign-in cookie, so it can't be recovered if you sign out, clear cookies or switch device. It is deleted when you sign out of the guest session or delete it from the Account page, and automatically after 60 days without use. You can save it to an email address at any time. The browser extension's data lives in your browser's local storage, is not part of the guest account and is lost with your browser data.

When you import an unofficial transcript, our server reads it in memory to pull out the course list, then discards it. The file and its text are never written to disk, logged or stored, and the name and student number on it are thrown away. You review the result first, and only the courses you confirm are saved.

If you install the browser extension, it reads only UW Time Schedule pages, using your own UW sign-in, and never sees your password. The rooms and instructors it finds stay in your browser. They are sent to our server only with a schedule request, to compute walking times, and are not stored or logged.

Other users can't see your data: the database only lets each account read its own rows. Passwords are hashed and can't be read by anyone.

We never sell your data, share it for advertising, or use it to train AI models.

• Supabase hosts the database and handles sign-in. Data is stored in the United States (US West).
• Vercel hosts the website and API.
• Resend delivers account emails, such as confirmations and password resets.
• Cloudflare (Turnstile) checks that sign-in attempts come from a real browser. It receives your IP address and browser signals when you sign in, change your password or start a guest session.

These providers process your data only to run the site.

• Sign-in cookies keep you logged in. The site doesn't work without them.
• Your browser's local storage remembers interface choices on that device: theme, panel sizes, collapsed sections and schedule section picks. They never leave your device.

There are no analytics, advertising or tracking cookies.

• Export: download everything listed above as JSON from the Account page.
• Delete: deleting your account on the same page, or signing out of a guest session and choosing to delete it, immediately and permanently removes the account and all of its data from the database. Guest accounts you never delete are removed automatically after 60 days without use.
• Correct: you can edit or remove anything in your plan at any time.

Our hosts keep standard request logs (such as IP address, time and page) for a short period to debug problems and stop abuse. They do not include your plan or transcript. Deleted data may remain in our hosts' backups until those backups expire.

All traffic is encrypted in transit, and the database is encrypted at rest by our host.

The site is meant for college students and is not directed at children under 13.

If this policy changes in a way that matters, we'll update this page and the date at the top. Questions or requests: rchhab08@uw.edu.