Chrome Extension

Privacy Policy

ITATS Extension · Last updated: May 2026

Overview

ITATS Extension is a Chrome browser extension designed solely to assist verified students of Institut Teknologi Adhi Tama Surabaya (ITATS) in submitting attendance forms on classroom.itats.ac.id.

We take your privacy seriously. This policy explains what data is collected, how it is used, and how it is protected.

Data collected

The extension collects the following information from your browser session:

–NPM (Nomor Pokok Mahasiswa) and full name — read from your profile page on classroom.itats.ac.id to verify your identity against the authorized student whitelist.

No other personal data is collected. The extension does not access your passwords, browsing history, messages, location, or any data outside of classroom.itats.ac.id.

How the data is used

Your NPM and name are sent to a secure verification server hosted on Supabase for the sole purpose of confirming that you are an authorized user of this extension.

Upon successful verification, a signed JWT token is returned and stored locally in your browser using chrome.storage.local, encrypted with AES-GCM. This token is valid for 2 hours, after which re-verification occurs.

–Data is used only for identity verification.
–Data is never sold or shared with third parties.
–Data is never used for advertising, profiling, or any purpose unrelated to access control.

Data storage

All data is stored locally on your device via chrome.storage.local. The JWT token is encrypted before storage. No data is retained on any server beyond the verification request.

Third-party services

The extension communicates with a Supabase-hosted endpoint solely for NPM verification. No other third-party services are involved. Supabase's own privacy policy applies to that interaction.

Permissions used

–activeTab — to interact with the current classroom page and detect attendance forms.
–scripting — to inject scripts that detect and submit attendance forms on classroom.itats.ac.id.
–storage — to save user settings and the encrypted verification token locally.
–tabs — to open classroom course pages when processing multiple classes.
–Host permission (classroom.itats.ac.id) — the extension operates exclusively on this domain.

Contact

If you have questions about this privacy policy, please contact us at support@itats-extension.web.id