UniPath Bridge is a personal-use Chrome extension that captures Khan Academy and IXL exercise activity from the browser it's installed in and forwards it to a parent-managed dashboard. This policy describes exactly what data is collected and how it's used.
When the extension is active on *.khanacademy.org or *.ixl.com, we capture network requests the page makes to those domains:
We do not collect:
Captured events are sent to a single endpoint operated by the extension owner: https://khan-bridge.nuttarong1976.workers.dev/collect
Authentication uses a fixed bearer token bundled with the extension. The endpoint stores events in a Cloudflare Workers KV namespace owned by the extension owner.
Only the extension owner (the parent who deployed this) has the bearer token to read back events from /events. The bearer token is not transmitted to any third party.
This extension is built for a single-family use case: a parent wanting to see their child's homework progress on Khan Academy and IXL. It's not a general-purpose data collector. The captured data is the minimum needed to reconstruct "what exercises the child worked on and how they scored."
Events are kept indefinitely in the parent's Worker KV store. The owner can delete events by purging the KV namespace.
| Permission | Why |
|---|---|
host_permissions: *.khanacademy.org | Inject capture scripts on Khan Academy pages |
host_permissions: *.ixl.com | Inject capture scripts on IXL pages |
host_permissions: unipath-web.pages.dev / unipath.app | Write the "installed" marker on the parent dashboard |
host_permissions: khan-bridge.nuttarong1976.workers.dev | POST captured events to the parent's ingest worker |
storage | Persist pending events between service-worker wakes |
For questions or removal requests: nuttarong1976@gmail.com