Privacy policy

RU Scheduling is built to keep as little about you as it can. This page says what it keeps, where, and how to remove it.

Without an account

Everything you enter — your course list, programs of study, selected courses, saved schedules and setup choices — is stored in your browser’s local storage on your device. It never leaves the device unless you sign in. Clearing the site’s data in your browser removes it.

With an account

• Sign-in uses an email address and a password, handled by Supabase Auth. The site never sees your password; Supabase stores a hash of it and sends the confirmation and password-reset emails, delivered through Resend from the site’s own domain.
• The same data you keep locally (course list, programs, schedules, setup) is copied to the site’s database, hosted by Supabase, so you can use it on other devices. Each row is tied to your account and protected by row-level security: only your own sign-in can read or change it.
• “Delete my cloud data” on the Account page removes all of it and signs you out. To delete the sign-in itself as well, ask through a GitHub issue from the same email address.

Your transcript

The transcript PDF import is read entirely in your browser. The file is never uploaded. Only the course rows extracted from it (code, title, credits, grade, term) are kept, like courses you add by hand — and synced to your account if you are signed in. Grades are used for the degree audit’s grade conditions and are shown only to you.

What the servers see

• The site is served by Vercel and its course-data API by Fly.io. Like any web host, they keep standard request logs (IP address, browser type, pages or API paths requested, timestamps) for a short time for security and operations.
• Requests to the course-data API carry course codes and program ids (what you are looking at), never your name, email or course list. Degree audits are computed from the course codes you send and are not stored.
• There is no analytics, advertising or tracking script, and no cookies beyond the sign-in session. If that ever changes, this page will say so.

Rutgers systems

The site never asks for your NetID or Rutgers password and does not log in to any Rutgers system for you. “Register” opens WebReg on Rutgers’ own site in a new tab, with the section indexes pre-filled; you sign in there as usual. Course data comes from Rutgers’ public Schedule of Classes feed, which has nothing about individual students.

Children

The site is meant for university students and is not directed at children under 13.

Changes and contact

Changes to this policy are dated at the top of the page. Questions go to the GitHub issues or the contact section.