sclass
Privacy

Privacy: what we store and why

sclass is an unofficial student project. To show your eClass data in a friendlier way, it signs in to eClass on your behalf. Here is everything, in plain language.

Your password

When you sign in, your password is sent to eClass to check it. By default it is then not kept anywhere. Only if you tick "Keep me synced in the background" is it stored, encrypted, so the site can sign in to eClass for you every 3 hours. It is decrypted only at that moment, never shown, and never written to logs. It is deleted at once when you turn background sync off on the Account page, or when eClass stops accepting it (for example, after you change your password).

Your eClass session

After you sign in, the session cookie eClass gives us is kept encrypted for at most 2 hours, so the site can refresh your materials while you use it. It is deleted when you sign out or when it expires.

What we store

Your eClass username; your courses; assignment deadlines, submission status and grades; materials you marked as studied; your sync history; and how many AI questions you asked each day. Course materials (file names, links and their text) are stored once per course and shared by the students enrolled in it. Files themselves are not stored: when you open one, it is fetched from eClass for you.

How it is protected

Stored secrets (your eClass session and, if you turn on background sync, your password) are encrypted with Fernet (AES). The encryption key lives only in the server settings, never in the database or the code. The site only works over HTTPS, sign-in attempts are rate-limited, and passwords and cookies are masked in logs.

The AI assistant

Questions you ask the AI assistant, together with passages from your course materials, are sent to Google Gemini to write the answer. On the free tier of the Gemini API, Google may use this data to improve its products, so do not type personal information into the chat. Study packs (summary, flashcards, quiz) are also made by Gemini from the text of course materials; no personal data is sent for them.

Who can see it

Only you see your personal data (grades, assignments, sync history). Course materials are visible only to students enrolled in that course. Nothing is sold or used for advertising.

Deleting your data

The "Disconnect & delete my data" button on the Account page deletes your account and everything linked to you right away. Course materials that no one else uses are deleted too.

An unofficial project

INHA University and eClass are not responsible for this site and do not run it.