Privacy Policy
Last updated: March 12, 2026
1. Introduction
The OTU Exam Attendance Tracker ("we", "our", or "us") respects your privacy. This Privacy Policy explains how your information is collected, used, and protected when you use our web application.
2. Data We Collect
- Google Account Information: When you sign in using Google OAuth, we receive your email address and basic profile information solely to authenticate your identity.
- Google Sheets & Drive Data: We request access to your Google Drive and Google Sheets to list your available files and update attendance records on the specific sheets you select.
- Camera Feed: Our application requests local access to your device's camera to scan barcodes.
3. How We Use Your Data
We do not store your data on any external servers.
- Your Google account data is only used temporarily in your browser session to facilitate connection to your own Google Sheets.
- The camera feed is processed locally on your device. No video or images are recorded, saved, or transmitted to any server.
- Scanned barcode data (Student IDs) is transmitted directly from your browser to your selected Google Sheet via the official Google Sheets API.
4. Google API Services User Data Policy
Our use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
5. Data Protection and Security
We implement strict security measures to protect sensitive information, including Student IDs and authentication data:
- Encryption in Transit: All data transmitted between your device and Google APIs is encrypted using industry-standard TLS/HTTPS protocols.
- No Persistent Storage: Sensitive data, such as scanned Student IDs, is only held in volatile memory during the active scanning session and is immediately discarded once securely transferred to your Google Sheet.
- Secure Authentication: Access to your Google account relies on secure OAuth 2.0 tokens, which are handled directly by your browser and are never stored persistently on any external database managed by us.
- Data at Rest: Because we do not use an independent backend database, the security of your saved attendance data relies on Google's robust infrastructure within your personal Google account.
6. Contact Us
If you have any questions about this Privacy Policy, please contact the application administrator at Ontario Tech University.