Privacy policy

OpenIMSCC (canvas-export-opener.vercel.app) is operated by Mishal (Museeb). This policy explains what happens to your files and what little data we collect. Questions: info@museeb.tech.

Your files never leave your browser

When you open a .imscc or QTI .zip file, it is read and converted entirely inside your web browser on your own device. The file, its contents, file names, course titles, student or quiz content are never uploaded to us or to anyone else, and we never store them. When you close or reload the page, the file is gone from memory.

What we collect

• Anonymous usage events. To learn whether the tool works, we record events such as “page visited”, “file opened”, “export completed” or “file could not be read”. Each event has the event name, the page path, a random ID stored in your browser’s local storage (not linked to your name or email), and non-identifying details such as the export format (.imscc or QTI), a rough file size bucket, and counts of question types. We never record file names, file contents or course titles.
• Rate limiting. To stop abuse we store a one-way hash of your IP address combined with a secret that changes daily. We can’t turn it back into your IP address.
• Page analytics. We use Vercel Web Analytics, which counts page views without cookies.
• Purchases. If you buy a Course pass, payment is handled by Stripe. We receive your email address, the amount, and a code that identifies the course the pass is for (a hash, not the course itself). We use your email only for receipts, refunds and support. We never see your card details.
• Email. If you email us, we keep the conversation to answer you.

Cookies and local storage

We don’t use advertising or tracking cookies. We use your browser’s local storage for the random anonymous ID above and, if you buy one, your Course pass license key. When a course is open, the key is checked with our server together with a one-way hash of the course’s identifier, never the course itself. You can clear local storage at any time in your browser settings.

Who processes data for us

• Vercel Inc. (website hosting and page analytics)
• Supabase Inc. (database for the anonymous event log and purchase records)
• Stripe Inc. (payments, only if you buy something)

We don’t sell personal data or share it with anyone else, and we don’t use it for advertising.

How long we keep it

Anonymous usage events are kept for up to 24 months. Purchase records are kept as long as tax and accounting law requires.

Your rights

Depending on where you live (for example under the GDPR or CCPA), you can ask to access, correct or delete personal data we hold about you, or object to how we use it. Email info@museeb.tech and we’ll reply within 30 days. Because usage events are anonymous, we usually can’t link them to you unless you give us the random ID from your browser.

Children

OpenIMSCC is a tool for teachers and other adults. It isn’t directed at children and we don’t knowingly collect personal data from them.

Changes

If we change this policy, we’ll update this page and the date at the top.