Privacy Policy

Last updated: June 2026

We take your privacy seriously — especially when it comes to students. Here's exactly what we collect, why, and what we don't touch.

Overview

AndWhat Learning Gatekeeper (“the Extension”) is a browser extension that helps Australian school students revise their coursework through micro-quiz interactions while browsing the web. This privacy policy explains what data we collect, how we use it, and your rights.

Who We Are

AndWhat is an Australian educational technology product. Our web platform is hosted at andwhat.au.

What Data We Collect

Data We Collect

  • Reference code: The teacher-provided code entered by the student to join a course
  • Device identifier: A randomly generated ID stored locally to maintain your session across browser restarts
  • Gated site visits: When you visit a URL that your teacher has marked as "gated," we record that the visit occurred
  • Quiz responses: Your answers to revision questions, including whether each answer was correct
  • Wellbeing responses: If you choose to respond to the optional daily wellbeing check-in, your selected response is recorded
  • Timestamps and duration: When quiz attempts occurred and how long they took

Data We Do NOT Collect

  • Browsing history (we do not track which websites you visit beyond gated URLs)
  • Personal messages, emails, or social media content
  • Passwords or login credentials for any service
  • Location data
  • Microphone, camera, or screen content
  • Cookies or tracking data from other websites
  • Any data from non-gated websites

How Data Is Used

  • Quiz attempt data is used to show teachers aggregated engagement statistics (e.g., total attempts, pass rates)
  • Wellbeing responses are anonymised — teachers only see aggregate trends, never individual responses
  • Device identifiers are used solely to maintain your session and prevent duplicate quiz responses

Data Storage

  • All data is stored on servers located in Australia
  • Data is protected by the Australian Privacy Act 1988
  • Extension settings and tokens are stored locally in your browser using Chrome's storage API
  • No data is sold to or shared with third parties

Children's Privacy

  • The Extension is designed for use by school students, including those under 16
  • No personal information (name, email, etc.) is required to use the Extension — students only need a reference code
  • Parents can manage data collection consent through the parent dashboard at andwhat.au
  • The Extension complies with the Australian Privacy Principles regarding children's data

Data Retention

  • Device enrollment tokens expire after 90 days
  • Quiz attempt data is retained for the duration of the school term/year
  • You can clear all locally stored data by clicking “Reset” in the extension popup

Your Rights

  • You can stop using the Extension at any time by removing it from your browser
  • You can clear all local data via the “Reset” button in the extension popup
  • Parents can revoke data collection consent at any time through the parent dashboard
  • To request deletion of server-side data, email us at [email protected]

Permissions Explained

PermissionWhy We Need It
storageTo save your enrollment token and settings locally
alarmsTo schedule the daily wellbeing check-in (once per day)
webNavigationTo detect when you visit a gated site and show the quiz overlay
host_permissionsTo inject the quiz overlay on any gated website your teacher has configured

Changes to This Policy

We may update this privacy policy from time to time. Material changes will be communicated through the extension or website.

Questions?

For privacy-related queries, email us at [email protected]