Privacy & tokens

DueBoard (formerly Usyd Due) is a personal project that helps you track assignment deadlines from Canvas and Ed via their official APIs.

What we store

• Your email (for magic-link sign-in and optional reminder emails).
• Encrypted Canvas / Ed API tokens (Fernet) if you choose to connect them.
• Course IDs you configure, optional manual extras, and a short-lived cache of upcoming dues.

What we do not do

• We do not scrape login pages or store your LMS password.
• We do not show your dues to other users.
• We do not put API tokens in frontend JavaScript.

Revoking access

1. Delete the access token in Canvas (Account → Settings) and/or Ed API settings.
2. In DueBoard Settings, clear the stored tokens.

An API token has the same power as being logged in for the scopes it grants. Only paste tokens you created yourself.