Privacy policy
Effective 30 September 2026
The short version
- Your binder — courses, grades, schedule, notes and uploads — is private to your account. Nobody else can read it.
- There are no ads, no cookies, and your data is never sold or shared for marketing.
- The app counts which features get used, anonymously. Those counts never include your name, email, scores, subjects or anything you type.
- You can download a backup of your data, or delete your account and everything in it, at any time from Settings.
Who we are
IB Mark Tracker (ibmarktracker.com) is an independent study app built by an IB student. It isn’t affiliated with, or endorsed by, the International Baccalaureate Organization. Questions about this policy or your data can be sent to @ibmarktracker on Instagram.
What we store, and why
- Your account. To sign you in, Firebase Authentication (a Google service) stores your email address and a password hash, or — if you use “Continue with Google” — the basic profile Google shares (your email, name and profile picture). The app only uses your email, to show which account you’re signed in with.
- Your binder. Everything you add to the app: your courses and levels, class schedule, calendar items and deadlines, grades and grade boundaries, rubrics, flashcards, study-timer log and settings. It’s stored in Google Cloud Firestore so it syncs between your devices.
- Your uploads. PDFs and photos you upload (for example rubrics) are stored the same way, in your account only.
- Anonymous usage counts. When you use certain features the app records a tiny event: the feature’s name (for example “app_open”), the date and time, and a random id made up by your browser. It doesn’t contain your account id, email, name, scores, subjects or any binder content, and nobody can read these events back from the app. They’re only looked at as totals, to see which features are worth improving.
We don’t collect your location, contacts, camera, microphone or anything else from your device, and there’s no advertising or third-party tracking (no Google Analytics, no pixels).
What stays in your browser
The app sets no cookies. It keeps a few things in this browser’s own storage:
- your sign-in session, so you stay signed in;
- an offline copy of your binder and the app itself, so it opens and works without internet;
- the random anonymous usage id described above;
- whether you’ve dismissed the one-time storage notice;
- if you connect Spotify, your Spotify sign-in tokens and the timer player’s position on screen.
Clearing this site’s data in your browser settings removes all of it from that device (your binder stays safe in your account).
Spotify (optional)
If you choose to connect Spotify to the study timer, your browser talks to Spotify directly using Spotify’s secure sign-in. Your Spotify tokens stay in your browser and are never sent to or stored in your IB Mark Tracker account. Spotify’s own privacy policy applies to what you do there. You can disconnect at any time.
Who provides the services
- Google Firebase — sign-in and data storage. Your data may be stored on Google servers outside your country. See Firebase’s privacy information.
- Cloudflare — hosts the website. Like any website host, it handles your IP address and basic request information to deliver pages and protect against abuse.
- Google (gstatic.com) — the sign-in and database code is loaded from Google’s servers, which also see your IP address when it downloads.
These providers process data on our behalf to run the app. We don’t sell, rent or share your personal information with anyone else, except if the law requires it.
How it’s protected
Everything travels over encrypted HTTPS connections. Database security rules only let a signed-in user read or change their own binder and uploads — not anyone else’s, including other students’. The app also uses a strict content security policy to block injected scripts.
How long we keep it, and deleting it
Your binder and uploads are kept until you delete them or delete your account. To delete everything, open Settings → Delete account. After you confirm, the app immediately deletes your uploads, your binder and your sign-in account, and clears this device’s offline copy. Google may keep deleted data in its systems for a short time before permanently erasing it, as described in its own policies. Anonymous usage events aren’t linked to your account, so they can’t be traced back to you; they’re only ever looked at as totals.
Your choices and rights
- See and change your data — everything is visible and editable in the app.
- Take a copy — Settings → Your data → Download backup saves your binder as a file you can keep or restore later.
- Delete it — Settings → Delete account.
Depending on where you live (for example under the GDPR in the EU/UK, or privacy laws in Canada or US states like California), you may have further rights, such as to object or to complain to your data-protection authority. Contact us with any request and we’ll help.
Students and age
IB Mark Tracker is made for IB Diploma students, who are usually 15 or older. If you’re under the age where your country requires a parent’s or guardian’s consent to use online services (for example under 13 in the US, or under 16 in some EU countries), please ask them before creating an account. If a parent believes their child’s data should be removed, contact us or use Settings → Delete account.
Changes to this policy
If this policy changes, the updated version will be posted on this page with a new effective date.