Privacy
Jarito has no accounts and no database. Here is everything that happens to your data.
What stays on your device
Your calendar feed link, your assignment list, and what you’ve marked done or started are saved in your browser’s local storage. They never leave that browser except as described below. Clearing site data, or pressing Disconnect calendar, removes the link.
What passes through our server
Canvas and Brightspace don’t let websites read calendar feeds directly, so when the Jarito website checks your calendar it sends your feed link to a small function at /api/feed. That function downloads the calendar from your school’s system and hands it straight back to your browser. It doesn’t save the link or the calendar, and doesn’t write them to logs. Your IP address is used briefly to limit how often a single device can sync.
The Chrome extension
The extension keeps your feed link, assignment list, what you’ve marked done, and whether you want notifications in Chrome’s extension storage on that computer. It reads your calendar straight from your school’s system, so with the extension your feed link never passes through our server at all.
It can only see the site your calendar is on, and only after you choose Allow. Chrome asks when you first connect, for that one site (for example yourschool.instructure.com), not for every site you visit.
When you press Get my link from this tab, it looks at the tab you have open once. On Canvas it asks your Canvas profile for your calendar feed link and keeps only that link; on other pages it looks for a feed link showing on the page. It reads nothing else, and does nothing in the tab until you press the button. If no link turns up, it gives back access to that site.
While Chrome is open, it checks your calendar about once an hour and shows a notification on your computer when a due date moves or new work is posted. You can turn notifications off under the list. The extension has no visit counting or analytics. Removing it from Chrome deletes everything it stored.
Moving to your phone
The “Open on my phone” code puts your feed link after a # in the address. Browsers never send that part of an address to a server, and Jarito removes it from the address bar as soon as it has saved the link.
Visit counts
Jarito counts page visits with Vercel Web Analytics so we can tell whether students are finding it useful. It uses no cookies and doesn’t identify you or follow you to other sites. Only the page address is recorded, with everything after a # or ? removed first, so a feed link can never be included. Vercel also sees rough details like country and device type.
What we don’t do
No ads, no cookies, no cross-site tracking, no selling or sharing your data. Jarito is open source, so you can check all of this in the code on GitHub.
Feedback
If you use the feedback form, your message, plus your school and email only if you fill them in, is sent as an email to the person who maintains Jarito. It isn’t stored anywhere else or connected to your calendar. The form refuses messages containing a calendar feed link, so a link can’t be sent by accident.
Support payments
Jarito is free for students, and chipping in is optional. It doesn’t change how Jarito works or what it stores. If you choose to support it, the payment happens on Stripe’s checkout page: Jarito never sees your card details, and nothing about your payment is connected to your calendar or assignments. The charge appears as Oduor Web Services.
Your feed link
Anyone who has your feed link can see your course calendar. If you think it has leaked, reset it: in Canvas, Calendar, then Calendar Feed, then reset; in Brightspace, Calendar, then Subscribe, then reset the token and paste the new one into Jarito.
Jarito is an independent open source student tool and is not affiliated with Instructure, Canvas, D2L or Brightspace. Questions and feedback can be sent through the GitHub project.