MangoGrade
Policies← Back to MangoGrade
Privacy

Privacy Notice

This notice describes the standard, local MangoGrade application in this repository. It is a software description, not a promise that every fork, host, browser, or device handles information the same way.

Last updated September 17, 2026
Important: MangoGrade is an independent project, not a school-district-approved service. It handles sensitive student information. Use it only if you are authorized and your family and school rules permit it. Do not use a copy hosted or modified by someone you do not trust.

Who operates MangoGrade?

MangoGrade is an unofficial, locally run grade-planning interface. It is not operated, sponsored, or endorsed by any school district or student information system vendor. In the standard setup, the server listens on this device at 127.0.0.1; the project does not provide a hosted account service.

School districts publish their own privacy and terms notices and online digital tool guidance for their official student portals. Those govern or describe district services, not MangoGrade. This project does not claim to have school district vetting, approval, or a data-sharing agreement.

Information handled

  • Sign-in information: your school portal username and password are sent from the browser to the MangoGrade process running on the same device. That process forwards the login request to the school district service endpoint over HTTPS. The password is cleared from the app after the login attempt; it is not intentionally written to a MangoGrade database or log. Your browser or password manager may separately offer to remember it.
  • Session: after login, the upstream access token is held in server memory. The browser receives an HttpOnly session cookie containing a random session identifier, not your password or grade data. The session expires after two hours by default, or up to 30 days if you opt in to “Keep me signed in.” Signing out or restarting the local server clears the server-side session.
  • Gradebook and simulations: the app fetches class and assignment data to display it and preloads available reporting periods into browser memory to make term switching faster. Hypothetical score and category edits are also made in browser memory and are not sent back as grade changes. This data disappears when the page is reloaded. This build has no in-app grade-export feature.
  • Browser storage: the selected color palette and light/dark appearance preference are stored in local storage on this device, not synced to an account. The login page checks the browser’s device indicator locally to decide whether to show phone installation instructions; MangoGrade does not store or separately transmit that detection result. The installable app may cache its HTML, CSS, JavaScript, and icon files for launch; it does not cache API responses, credentials, session tokens, grades, or simulations. MangoGrade does not use advertising or analytics scripts in this build.

Where information goes

In the standard local setup, authentication and gradebook requests are sent to the school district service. MangoGrade does not intentionally send credentials or grade data to an analytics provider, ad network, or unrelated proxy. Network, operating-system, browser, or district systems may process technical information according to their own rules.

If someone changes this software, exposes it on a network, or hosts it for you, that operator can potentially access credentials, session tokens, and grade data processed by their copy. The local-use description above does not apply to a third-party hosted or modified copy.

Retention and deletion

The standard server keeps the active session token in memory until logout, session expiry, or server shutdown. Grade simulations stay in the open page and disappear when it is reloaded or closed. Sign out to invalidate the current session and clear its cookie. Theme preference can be cleared in your browser’s site-data settings.

Student information and safe use

Gradebook data can be sensitive education information. Access only the account and records you are authorized to access. Do not share credentials, use another student’s account, or send screenshots containing personal details to people who do not need them. If you are a student, check with a parent or guardian and follow current school and district requirements before using an independent tool with student data.

Security limits and questions

No software or device can guarantee perfect security. Keep the app on a trusted device, do not expose its local server to the public internet, and sign out on shared devices. If you believe credentials were exposed, stop using that copy and change the password through the official district channel.

This project does not have a central user account or hosted support desk. For questions about a particular copy, contact the person who provided or operates it. For legal or policy decisions, consult a qualified professional or your school district; this notice is not legal advice.