Privacy Policy

This Privacy Policy explains how the SHORTCUT Chrome extension ("SHORTCUT", "the extension", "we", or "our") handles information when you use it. SHORTCUT helps students access common workflows on the KL University ERP portal and provides an optional feedback feature.

1. Information Stored on Your Device

SHORTCUT stores configuration and interface state in Chrome extension storage and extension-origin browser storage so that you do not need to re-enter your preferences each time:

• shortcutConfig (chrome.storage.local): Stores your chosen nickname (for popup greetings), KL University student ID, ERP password, and selected academic year and semester.
• shortcut_companion_dismissed (chrome.storage.local): A boolean preference recording whether you dismissed the first-use KLU ERP Captcha Auto-Fill companion card so it does not repeatedly appear in the setup interface.
• shortcut_feedback_last_submitted (extension localStorage): A timestamp in milliseconds recording when feedback was last submitted, stored in the extension popup's own origin localStorage to present a client-side 10-minute cooldown hint between submissions.
• Session State (chrome.storage.session): Temporary credentials and workflow state cached strictly during an active browser session to coordinate automated navigation across verified ERP tabs.

Saved configuration is stored using Chrome's extension storage APIs, including chrome.storage.local. These stored credentials are not encrypted by SHORTCUT itself within your Chrome profile. Access to the local Chrome profile and the security of your device are therefore important. Do not save your password on a device you do not trust.

Clear Saved Configuration: In Settings, clicking Clear Saved Configuration removes only shortcutConfig from chrome.storage.local and credentials and activeAttendanceTabId from chrome.storage.session. It does not clear all session state or interface values: shortcut_companion_dismissed in chrome.storage.local, shortcut_feedback_last_submitted in extension localStorage, and tab routing state (such as activeFlowTabs) are not removed by this action.

2. How ERP Login and Navigation Work

When you select an ERP shortcut, SHORTCUT opens the KL University ERP website at newerp.kluniversity.in and assists with the login and navigation process. If you have saved your credentials, the extension can fill them into the portal's login form.

You must handle any CAPTCHA or other verification presented by the university portal yourself. SHORTCUT's login workflow includes a waiting period and submission logic after the form is populated; the university portal remains responsible for authentication and deciding whether to accept the login.

Your student ID and password are intended to be entered into the official ERP portal. SHORTCUT does not intentionally send those credentials to its feedback service or to the extension developer. The university portal processes information according to its own policies and practices.

SHORTCUT may manage ERP tabs and clear cookies for the ERP domain as part of its session-reset workflow. This is intended to help start a fresh portal session.

3. Optional Feedback and Firebase

Submitting feedback is entirely voluntary. If you choose to submit feedback or feature suggestions, SHORTCUT uses Firebase Anonymous Authentication and Cloud Firestore within the shortcut-feedback project:

• Feedback Document (/feedback): Stores your rating (integer 0–10), written review (up to 2,000 characters), optional feature idea (up to 1,000 characters), and a server-generated Firestore submission timestamp. The feedback document itself does not contain your university credentials, personal identity, or user ID.
• Rate-Limit Document (/feedbackRateLimits): Stores an anonymous Firebase user identifier (UID) as the document key, a submission timestamp, and a feedback document reference for rate-limit and cooldown handling. Actual server-side cooldown enforcement depends on deployed Firebase security rules.

Feedback is sent to Google's Firebase services for storage and for the developer to review, respond to product issues, and improve SHORTCUT. Feedback records may be retained indefinitely.

The extension also uses a timestamp stored in the extension popup's origin localStorage to display a client-side 10-minute cooldown hint. Server-side cooldown enforcement depends on the Firebase security rules deployed to the live project; we do not represent the deployment status of those rules as verified by this policy.

4. Browser Storage Used for Preferences

In addition to saved configuration and session information, SHORTCUT stores small pieces of interface state:

• First-use companion dismissal: Stored as shortcut_companion_dismissed in chrome.storage.local so the KLU ERP Captcha companion card does not repeatedly appear in the setup interface.
• Feedback cooldown timestamp: Stored as shortcut_feedback_last_submitted in the extension popup's own origin localStorage (isolated under the extension's unique origin, not on the university ERP website).

These values support the extension's user interface, are stored under the extension's own origin, and are not directly accessible to the university ERP website through its origin.

5. Sharing and Disclosure

SHORTCUT does not sell your personal information. Saved ERP credentials are not intended to be shared with the developer or the feedback database. If you submit feedback, the information you choose to include is sent to Firebase for storage and access by the developer through the configured project.

The extension may open third-party websites, including the KL University ERP portal and Chrome Web Store listings for other extensions. Those websites operate independently and have their own privacy policies. Information you provide directly to those services is governed by their practices.

6. Data Retention and Deletion

Saved credentials remain in Chrome extension storage until you edit them or clear them in Settings via Clear Saved Configuration. As described above, clearing saved configuration removes only shortcutConfig from chrome.storage.local and credentials and activeAttendanceTabId from chrome.storage.session, while shortcut_companion_dismissed, shortcut_feedback_last_submitted, and tab routing state remain stored locally.

When you uninstall SHORTCUT, Chrome automatically deletes the extension's own stored data (including chrome.storage.local, chrome.storage.session, and extension-origin localStorage). However, uninstalling the extension does not delete cookies or session data on the university ERP portal (https://newerp.kluniversity.in/), nor does it delete feedback already stored remotely in Firebase Cloud Firestore.

Feedback submitted to Firebase may be retained indefinitely for product improvement. Users may contact the developer at smartboy.kpcsmart@gmail.com to request deletion of a feedback submission, but fulfillment of deletion requests is not guaranteed and no specific deletion process has been verified. Please do not email your ERP password or other login secrets.

7. Security

SHORTCUT limits its declared ERP host access to https://newerp.kluniversity.in/* and uses Chrome extension storage for its configuration. However, no software or storage method can be guaranteed completely secure. The saved ERP password is not encrypted by SHORTCUT itself, so you should protect your operating-system account and Chrome profile and avoid saving credentials on shared devices.

8. Children's Privacy

SHORTCUT is intended for students who are permitted to use the university ERP portal. It is not designed specifically to collect personal information from children. If you believe information has been submitted inappropriately, contact the developer.

9. Changes to This Policy

This policy may be updated when SHORTCUT's functionality, data handling, or applicable requirements change. The date at the top indicates when this page was last revised. Please review this page periodically.

10. Contact

For privacy questions, feedback-data requests, or other support regarding SHORTCUT, contact:

Email: smartboy.kpcsmart@gmail.com

11. University Affiliation

SHORTCUT is an independently developed extension and is not an official product of, or endorsed by, KL University unless expressly stated by the university.