Privacy Policy

Canvas to Microsoft To Do Chrome Extension  ·  Last updated: May 2026

Overview

Canvas to Microsoft To Do ("the Extension") does not collect, store, transmit, or share any personal data with the developer or any third party. All data handled by the Extension stays on your device or is sent directly between your browser and Microsoft's servers.

Data the Extension accesses

• Canvas assignment data (title, description, due date) — read directly from the Canvas web page you are viewing. This data is never sent anywhere other than to Microsoft To Do on your explicit request.
• Microsoft access token — obtained when you sign in with your Microsoft account and stored locally in chrome.storage.local on your device. It is used solely to create tasks in your Microsoft To Do account via the Microsoft Graph API. It is never sent to the developer or any other party.

Data we do NOT collect

• No personal identity information (name, email, etc.)
• No browsing history or web activity
• No usage analytics or telemetry
• No crash reports

Third-party services

When you click "Add to To Do", the Extension communicates directly with the Microsoft Graph API on your behalf. This communication is governed by Microsoft's Privacy Statement.

Data retention

The access token stored locally is cleared when you click "Sign Out" in the Extension. You can also remove it at any time by uninstalling the Extension or clearing its storage via chrome://extensions.

Changes to this policy

If this policy changes, the updated version will be published at this URL with a revised date.

Contact

Questions? Open an issue on GitHub.