Revised September 9, 2026. This describes the current Progress Report extension and licence service. Proposed tools may need different disclosures before release.
The report reads authorized student, assignment, submission and activity records from your Canvas site using your existing session. It processes those records in your browser and does not send them to Lamplighter as part of the report feature. We do not receive your Canvas API token or collect your session cookie.
The browser locally stores some student identifiers for comparing recorded activity, course identifiers for usage counting, your install ID, licence information, permitted Canvas hosts and preferences. This state is not a cross-device student-record service. Automatic expiry and account-change clearing of the activity identifiers are not yet implemented.
These records are not anonymous. An installation can be linked through its licence to a purchase email and institution. Turn optional usage posting off with the Usage counts button in a report. This does not disable licensing, delete prior records or clear local activity state.
Copy diagnostic creates technical information intended to describe request shapes, timings, counts and errors. Review it before sending it to us and do not attach real student records or screenshots containing them. Server checks for sensitive-looking fields are an additional guard, not a guarantee that a diagnostic is safe.
A customer-controlled remote diagnostic flow is not yet available. Development relay facilities exist for the operator's test installations and must not be activated for customers. We will update this page before offering a completed consent and preview flow.
The service uses Linode/Akamai for hosting, Backblaze B2 for encrypted database backups, Stripe for payments, AgentMail for transactional email, and ntfy.sh for operational notifications. Payment/email services receive the information needed for those tasks; notifications may contain install identifiers, a Canvas host or purchase information. healthchecks.io receives operational monitoring signals. The operator also keeps database and configuration backups on a local NAS.
We do not sell customer data or provide an institutional buyer with individual faculty activity records or student records through this product.
The live service does not yet apply an automatic retention limit to installation and usage records. Contact us to discuss access or deletion; a self-service deletion control and a fixed deletion turnaround are not available yet. We will explain any billing records that need to be retained when handling your request.
The documented backup schedule keeps local copies for 60 days and selected offsite daily, weekly and monthly snapshots, including monthly snapshots for up to approximately a year. A live deletion does not immediately remove an existing backup. Local extension data can be removed by clearing the extension's storage or uninstalling it; doing so also removes licensing state and can require support to reactivate.
Public pages do not run advertising or third-party analytics scripts. Some pages request licensing configuration or submit a key-recovery request. Administrator access uses a cookie. Hosting and payment providers may process ordinary request information needed to operate their services.
Changes to this description will be dated here. A future hosted student-data feature would need its own disclosed terms; it is not an automatic extension of the current service.
Questions: hello@lamplighter.cc.