Blodco · Effective 2026-10-25
Blodco Questpath Privacy Policy
Accounts and learning records
We process names, email addresses, roles, school/class membership, account approval and restriction settings, salted password hashes for local accounts, sessions, verification challenges, assignments, answers, grades, achievements, and AI credit usage. Teachers and school/platform administrators can access records as permitted by their role. Teachers with appropriate ownership or class consent can manage student information; school administrators control district credentials. Passwords are hashed and are not displayed as readable passwords.
Google Workspace and Classroom
If a school administrator connects Google, we use the authorized read-only scopes to import directory identifiers, names, emails, organizational units, suspension status, and enabled Classroom courses, teachers, and rosters. A configured school custom field may provide age information; Google does not supply a universal student age or global teacher role. Refresh credentials are stored server-side to support recurring sync, normally every six hours when due. Google sign-in verifies identity for imported accounts; it does not open public registration. Disconnect/revoke access through Google or contact the administrator to stop access and request deletion of retained imports. Our use of Google API data follows the Google API Services User Data Policy and applicable Workspace Limited Use requirements. Google directory/roster data is not used to train generalized AI models or for targeted advertising. Schools can optionally connect supported Skyward ISCorp OneRoster 1.1 read-only endpoints. School-supplied client credentials are encrypted server-side. Approved Google-connected accounts are matched by exact email; classes and current student/teacher enrollments are imported within the school’s selected OneRoster organization. We do not store Skyward-provided passwords or use this connection to write grades. Disconnecting removes the saved credential and archives imported class rosters; school audit and educational records remain subject to the retention notice.
AI, monitoring and guest links
Student tutor questions, recent conversation context, selected assignment text (without answer keys), and work photos are sent to OpenAI for tutoring and safety checks. Students should remove names and private details from photos. Tutor conversations are held in browser memory and are not saved as chat/photo records by Questpath; hosting/provider processing and logs may still apply. Optional voice input uses the browser speech service, which may process audio; read-aloud uses browser speech synthesis. Teacher-entered generation prompts, instructions, and selected research queries are sent to OpenAI to create activities and school login designs. Avoid including student identifiers or confidential records in prompts. The current directory sync does not send imported rosters to the generation service. Teachers review AI output. Fullscreen exits and tab switches during monitored activities are recorded for teacher reports; this is not webcam, microphone, or full-device surveillance and is not proof of cheating. Public game links collect an entered name and responses even without an account; links can be forwarded. Avoid confidential information in public activities.
Children and school authorization
Student accounts are provisioned by a teacher or school; public signup is closed. Schools and educators must arrange required parent/guardian or authorized school permission and provide appropriate notices before student use. A student’s agreement checkbox is not parental consent and does not replace a school agreement or required legal authorization. Parents can contact their school and Blodco regarding student data. School educational records must be used for authorized educational purposes.
Service providers and cookies
Sites and Cloudflare provide hosting and data storage; OpenAI supplies enabled AI generation/search; Google supplies authorized sign-in, directory, and Classroom access. When configured, verification emails are sent through the platform administrator’s authorized Gmail mailbox or Resend. The delivery provider receives the recipient email, verification message, and delivery metadata. The Gmail connection requests send permission; it does not read inbox contents. Sender refresh credentials are encrypted and kept server-side. Essential secure session cookies support login, and a short-lived OAuth cookie protects Google sign-in. AI credit records include model, token/tool usage, and charges. When a school configures an optional directory birth-date field, Questpath stores the date and calculated age for authorized school administrators. Directory profile photos may also be displayed. If a school enrolls a browser in the filtering pilot, QuestPath stores the school and account association, device enrollment and expiry information, and a hashed device credential to deliver domain policies. The extension does not collect browsing history or screen recordings. School administrators and IT can configure student and teacher email-policy lists. These lists are matched to current approved school accounts and do not create accounts, change account roles, or associate outside-school users. Approved manually created school accounts can link a matching verified Google identity for extension use without a Workspace directory. The separate extension identity binding does not replace their password or enable general website Google login. Imported Workspace accounts retain directory freshness and suspension checks. Verified Chrome-profile identity, active school membership and administrator restrictions control policy delivery. Confirmed ineligibility clears policies; offline browsers may retain their last verified rules only until a short membership lease expires. Schools can separately enable AI page classification and authorize public domains for excerpt analysis, including whether teachers are included. Other domains are classified by domain alone. For authorized public domains, a bounded excerpt, page title, URL path without query/fragment, document tag structure and iframe domains are sent through QuestPath to the existing OpenAI provider. Form entries, browser history, cookies, passwords and local storage are not collected by this scanner. Private-route exclusions and redaction are best-effort; schools must not authorize private-content domains. Raw page input is not saved by QuestPath. A school-scoped hashed-input classification cache lasts five hours from creation without renewal on a hit; changed sampled content creates a new entry. OpenAI provider processing and logs follow provider terms. Classification usage is billed to the school credit pool; cache hits do not call OpenAI. Automated results can be wrong, and schools choose review-only or page restriction for configured categories. Classification is not proof of misconduct or a mental-health assessment. When AI review is enabled, the extension can hide page content behind a review screen while the page loads for analysis. It keeps an error screen if review cannot complete, including exhausted credits, until retry or policy deactivation. This does not prevent the underlying network download or provide an operating-system lock. During an active class, assigned staff can issue open-site, redirect-current-web-tab, close-current-web-tab, and temporary allowed-site focus commands to connected student browsers. QuestPath stores the command type, supplied destination or allowed domains, target account/device, requesting staff, timestamps, delivery status, and result; expired command records are removed after seven days during subsequent device activity. Students see a class notice on supported web pages. The extension reports its version and last connection time. These are browser controls, not an operating-system lock or VPN. In the connected classroom build, school Google sign-in links the verified email and Google identity to an approved school account; the extension also reads the signed-in Chrome profile email to check the match. During an explicitly started class support session, QuestPath stores hand-raise and chat-request status, message text, sender identity, class association, and timestamps. Only current class members can use the session; each student sees only their own conversation, while authorized class teachers and school administrators can see class conversations. Chat uses basic language and link checks, not a guarantee that every inappropriate message is detected. Expired messages are hidden after seven days and removed during subsequent classroom activity; provider logs and backups may follow different retention. Optional live screen sharing starts only after a student chooses a window or screen in the browser permission prompt. Audio is disabled and QuestPath does not record the video. The feed is sent over WebRTC to the requesting authorized class staff member; students can stop sharing using the class page or browser sharing controls. Google STUN, and a platform-configured TURN relay if enabled, receive connection-related network information. WebRTC may expose network addresses to the participants and relay provider. Short-lived connection descriptions and sharing status are stored to establish the feed, are hidden when expired, and are removed during subsequent class activity. The extension turns red while fresh publisher and viewer connection signals indicate the shared feed is connected; it does not itself capture the screen. This does not provide silent full-device surveillance or browsing-history collection. We do not use imported school rosters for advertising.
Who operates this service
Blodco provides these services through Gabe’s Website Design LLC. Questions, privacy requests, access or deletion requests, and abuse reports can be sent to admin@gabeswebsitedesignllc.com. Please identify the app and your account email; do not send passwords or student records in an initial message.
Security and retention
Account and service records are kept to operate the service, maintain security, resolve disputes, and meet applicable obligations. There is no verified universal automatic deletion period. Removing an account or item does not necessarily immediately erase backups or service-provider logs. Access and deletion requests are reviewed, including any school record obligations. No system guarantees perfect security.
Your choices
Use available account and content controls, revoke optional browser permissions, clear browser-local data, or contact us about access, correction, deletion, or connected-service revocation. Schools manage their educational records; students and parents should contact their school as well. Requests may require identity verification.
Updates
Effective October 25, 2026. Material changes will be communicated through the service. This notice describes the current service and does not certify compliance with every law or promise features that have not been released.
Contact: admin@gabeswebsitedesignllc.com