Privacy Policy
What the extension is
VEDC Hub shows a teacher their own timetable and cover (substitution) lessons, as published by their school's VEDC Hub admin panel, and lets them send that same panel a request to be marked absent. It is a viewer and a request form for a system the school already runs; it is not a service we operate on your behalf.
What is sent to the school's server
The extension communicates with one address only —
https://vedc-admin.nseel.workers.dev — which is your school's
own VEDC Hub server. It sends:
| When | What is sent | Why |
|---|---|---|
| You type your activation code | The activation code your school gave you | To exchange it for an access token. The code is not stored after that; the token is. |
| Every refresh | The access token | So the server knows the request comes from your school. |
| After you pick your name | Which member of staff you selected | So your admin can see the extension is reaching people, and so your own cover can be identified. |
| You submit an absence | Which member of staff you are, the date, and (if you choose partial absence) which periods | So your admin can review and approve it. |
The extension never asks for and never sends a reason for an absence, a password, an email address, a phone number, a location, your browsing history, or the contents of any web page.
What comes back
The staff list and timetables your school has published, the day's cover assignments, school notices, and the status of any absence request you sent. This is the same information your school already publishes internally.
Where it is stored
On your own device, using Chrome's extension storage. Your timetable,
settings, tasks, chosen name and access token are kept in
chrome.storage.sync, which means Chrome itself will carry them
to your other computers if you are signed in to Chrome — that transfer is
done by Google as part of Chrome Sync, not by us. Larger reference data (the
staff directory, the day's cover board, notices) is kept on the one device in
chrome.storage.local and never synced.
Removing the extension removes its stored data. You can also disconnect at any time from the extension's Connect screen, which deletes the stored token.
What we do not do
- No analytics, telemetry, advertising or tracking of any kind.
- No third-party servers. The only network address the extension contacts is your school's own server, named above.
- No selling, renting or sharing of any data with anyone.
- No remote code: everything the extension runs ships inside the package.
- No access to the pages you browse. The extension has no content scripts and no permission to read any website.
Permissions, and why each is needed
storage— to keep your timetable, cover and settings on your device so the extension opens instantly and still works with no signal.alarms— to schedule the background refresh and to check the clock so a lesson reminder arrives at the right minute.notifications— to show the lesson and cover reminders you switch on in Settings.https://vedc-admin.nseel.workers.dev/*— the one server the extension is allowed to contact: your school's VEDC Hub panel.
Who controls the data on the server
The timetable, cover assignments and absence approvals live in your school's VEDC Hub admin panel, which your school administers. Questions about how long your school keeps that information, or requests to correct or remove it, should go to your school administrator.
Children's privacy
VEDC Hub is intended for teaching staff. It is not directed at children and collects nothing from them.
Changes
If the extension ever sends anything beyond what is listed above, this page and the Chrome Web Store data disclosure will be updated before that version is published.
Contact
Questions or problems: open an issue on GitHub.