Privacy at gradeLENS
gradeLENS’s current version is built to keep students’ login details and gradebook data on their own devices.
Direct to your school
When you choose a direct StudentVUE import, your browser sends your login details only to Bellevue School District’s official server at wa-bsd405-psv.edupoint.com. The response goes directly to your browser. gradeLENS’s application server does not receive your StudentVUE password, district session token, or plaintext gradebook. Optional account backup stores only an encrypted copy.
BSD405 may block direct connections from other websites. If that happens, gradeLENS stops and displays an error. It does not switch to a server relay. You can import a CSV file or enter assignments manually instead.
Screenshots and the optional extension
Screenshot text recognition runs locally using OCR scripts and an English language model served with this site. Your browser downloads these files, but the image and recognized text are not uploaded. Screenshot previews and raw recognized text are cleared when you close the importer; only assignments you choose to save enter local storage. Copied-text and CSV imports are processed locally too.
The optional browser extension connects directly to BSD405, keeps its session token and latest grade snapshot in browser session memory, and passes grade-only snapshots to this page using local browser messaging. It never stores your password or sends it to gradeLENS. Extension session data is cleared by Disconnect or restarting the browser; imported planner grades are removed separately with Clear saved grades.
Processed and saved on-device
Grade calculations, CSV parsing, and what-if scenarios run in your browser. Classes and assignments are saved in this browser’s local storage, which can be accessed by someone using the same browser profile. gradeLENS does not save StudentVUE passwords or session tokens. Your browser’s password manager is controlled by your own settings.
Your independent gradeLENS account
You can create a gradeLENS username and password without a ChatGPT account. The gradeLENS authentication server processes your username and password over HTTPS to create or verify a salted bcrypt password hash. It stores the hash, not your plaintext password. Secure, HttpOnly cookies keep your session separate from other users. Account sign-in is independent of StudentVUE.
Your browser uses the same gradeLENS password to encrypt the gradebook before upload using AES-256-GCM with a PBKDF2-derived key. The stored grade file is encrypted. The server does not store the encryption key, but it does process the gradeLENS password during authentication. Your StudentVUE password is never requested by this account form and the connector still sends StudentVUE credentials directly to BSD405.
Keep your gradeLENS password safe. Forgotten passwords cannot currently recover encrypted grades. Choosing “Keep me signed in” stores a non-exportable encryption key in this browser’s IndexedDB and allows a 30-day session cookie. Use it only on a personal device. Logging out revokes that session and removes the remembered key and local account copy from this browser.
Each account has its own encrypted file and device workspace. The site may store hashed-IP attempt counters to limit password guessing. Delete saved grade copy removes the current encrypted grade copy from active account storage. Other devices may have local copies; ordinary hosting operations and retention are separate.
You control your saved grades
Use “Clear saved grades” in the planner to remove gradeLENS’s saved classes and scenarios from this browser. It does not change your official gradebook. Clearing browser site data also removes the saved planner. Copies you exported or saved elsewhere are separate.
Hosting and sign-in
The hosting provider still receives ordinary website requests and ordinary account/session information used to open your workspace, such as your IP address and browser metadata. Those requests do not need to include student portal credentials or gradebook contents. gradeLENS includes no analytics scripts, advertising trackers, or remotely loaded fonts.
Independent from your district
gradeLENS is an independent planning tool, not an official BSD405 or Edupoint service. Estimates can differ from teacher grading rules.
Policy for the device-only version, updated October 25, 2026. The server-based StudentVUE relay remains disabled. Optional encrypted account backup is a separate, opt-in feature.