Privacy Policy

ExamGuard Online ("ExamGuard", "we") is a local-first exam tool. This policy explains what we collect, what we do not, and the choices you have. The short version: by default, your exam data never leaves your device.

1. Local-first by default

On the free tier, exams, questions, rosters and student answers are stored only in your browser's local storage (IndexedDB). This data is not transmitted to us or to any server. Clearing your browser data deletes it permanently — there is no copy on our side.

2. Optional cloud sync (Pro / School)

If you create an account and enable cloud sync, we store a mirror of your exams and submissions on our backend (Convex) so you can teach across devices and run remote students. This data includes:

• Account data — your email address and a salted password hash.
• Exam data — exam content, questions, settings and rosters you create.
• Submission data — student name, roll number, answers, grades, and proctoring risk events (e.g. tab-switch counts) for exams you run in cloud mode.

Cloud sync is opt-in. You can keep using ExamGuard entirely offline and never send us a byte.

3. Proctoring data

ExamGuard's proctoring is browser-based and best-effort. It records behavioural signals (tab focus loss, copy/paste, right-click, fullscreen exit, screenshot key presses) into a per-student risk score. ExamGuard does not use your webcam, microphone, screen recording, or biometric identification. We are deliberately not a surveillance proctor.

4. What we never do

• We do not sell, rent or share your data with advertisers.
• We do not record video or audio of students.
• We do not run biometric or face-recognition analysis.
• We do not track students across other websites.

5. Payments

Paid plans are processed by our payment provider. Card and banking details are entered on the provider's secure checkout and are never stored on ExamGuard's servers. We retain only a subscription status and billing reference needed to keep your plan active.

6. Data retention & deletion

Local data lives until you delete it in your browser. For cloud-synced accounts, you may request export or permanent deletion of your account and associated exam data at any time by emailing us. We honour deletion requests within 30 days.

7. Children's data

ExamGuard is a tool for teachers and institutions. Where students are minors, the teacher or institution is the data controller and is responsible for obtaining any consent required by local law; ExamGuard acts as a processor on their instruction.

8. Contact

Questions or data requests: starlalith1234@gmail.com. See also our Terms of Service and Refund Policy.