Privacy Policy

Who is responsible

Passcase is operated by Kyle Anthony Nierras. Each organization that uses Passcase (for example a school) decides who joins its classes and what activities they take, and is responsible for its own records of its members. Passcase stores and processes those records on the organization's behalf. Questions about this policy can be sent to kyleanthony47@gmail.com.

Information we collect

• Account information: your name and email address. When you sign in with Google, we receive your name, email address and profile picture from your Google account. When you sign up with a password, the password is stored only as a secure hash.
• Organization and class information: the organizations, programs and groups you belong to, your role (for example student or instructor), join requests, and a member number such as a student number if you or your organization adds one.
• Your work: the source code and multiple-choice answers you submit, the results of the tests, scores, and when you submitted. Instructors may add score overrides with a reason.
• Activity integrity information: during graded activities Passcase records when the page loses or regains focus, goes offline or online, and when a paste is blocked, and whether Safe Exam Browser was used. These are sent with your submission and shown to your instructors.
• Messages: announcements staff post and the in-app notifications Passcase creates for you.
• Technical information: our hosting providers keep standard server logs (such as IP address, browser type and request times) to operate and secure the service.

What stays on your device

Code you run with the Run button runs in your browser and is not saved. Passcase uses your browser's local storage to keep you signed in, remember your theme and selected organization, autosave code drafts, and hold submissions until they reach the server. Passcase does not use advertising or tracking cookies.

Usage statistics

Passcase uses Vercel Web Analytics to count page views, for example how many people open the sign-in page. It uses no cookies and doesn't identify you: it records the page address (without anything after "?" or "#"), the referring site, and your country, browser, operating system and device type, and it doesn't track you across other websites.

How we use information

• To sign you in and keep your account secure.
• To place you in your organization's classes and show you your activities.
• To grade your submissions and show scores to you and your instructors.
• To send in-app notifications and, for staff invitations only, email.
• To keep the service working, fix problems and prevent abuse.

We do not sell personal information, use it for advertising, or use it to train AI models.

Google user data

Passcase requests only the basic Google sign-in scopes (openid, email and profile). This information is used only to create and sign in to your Passcase account and to show your name to your organization. It is not shared with anyone else, not used for advertising, and not transferred except as needed to provide the service. Passcase's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Who can see your information

• Your organization's staff (owners, administrators, instructors and proctors) can see your profile, membership, submissions, scores and activity integrity information in their organization.
• Other participants see your name only where an activity shows a leaderboard.
• Service providers that run Passcase on our behalf: Supabase (database, sign-in and file storage), Vercel (website hosting and usage statistics), Resend (staff invitation emails) and Google (Google sign-in). They process information only to provide their service.
• When required by law, or to protect the safety of users or the service.

Each organization's data is kept separate from every other organization's.

Retention and deletion

Information is kept while your organization uses Passcase so that grades stay available. When an organization is deleted, its classes, submissions and grades are deleted with it. You can ask your organization, or email kyleanthony47@gmail.com, to correct your information or delete your account. Some records, such as grades your school must keep, may be retained as your organization requires.

Security

Information is sent over HTTPS and access is limited by role and by organization in the database. No system is perfectly secure, but we work to protect your information and will notify affected organizations of a breach as the law requires.

Students and minors

Students use Passcase through their school or organization, which is responsible for obtaining any consent required for its students, including students under 18.

Your rights

Depending on where you live (for example under the Philippine Data Privacy Act of 2012), you may have the right to access, correct, object to the processing of, or delete your personal information, and to lodge a complaint with a data protection authority. Contact us at kyleanthony47@gmail.com to use these rights.

Changes to this policy

We may update this policy. The date at the top shows when it last changed; significant changes will be announced in the app.