Privacy policy
Short version: your school data never leaves your computer, and we never sell anything.
Last updated October 13, 2026
Who we are
Brightspace D2L MCP Server ("the project", "we") is an independent project by a student developer, published at brightspacemcp.com and on GitHub. It is not affiliated with or endorsed by D2L Corporation.
The app
Brightspace MCP runs entirely on your own computer. It signs in to Brightspace through a normal browser window, and your session stays on your computer. Your courses, grades and files go from Brightspace straight to your computer and to the AI app you choose. None of it is sent to us.
Apart from the license check below, the only outside request it makes on its own is a check of the public npm registry to see whether a newer version exists. That request doesn't include any personal or school information.
The AI app you connect (for example Claude, ChatGPT or Cursor) receives the answers it asks for. That company's own privacy policy covers what it does with them.
This website
The site is hosted by Netlify, which keeps standard server logs such as IP address, browser type and the pages requested. We don't use advertising trackers or sell any data. If you join the Pro waitlist, we collect your email address and school name, and use them only to tell you when Pro is available. Ask us to delete them anytime.
Subscriptions and alerts
Alerts and the calendar feed also run on your own computer, using the same saved session. Your grades, courses and sign-in never reach us.
- Payments. Stripe processes payments and holds your billing details, such as your email address and card. We never see or store your full card number. Stripe's privacy policy covers what they handle.
- License checks. About twice a day, the app sends your subscription key to brightspacemcp.com so we can ask Stripe whether your subscription is active. The key is the only thing sent. We don't store it.
- Notifications and calendar. Alerts are shown by your computer, and the calendar feed is served only to your own computer.
Your choices
- Remove your key from your computer at any time with
npx -y https://brightspacemcp.com/pro/brightspace-mcp-pro.tgz deactivate. - Cancel your subscription at any time from the billing page.
- Ask us for a copy of your data, to correct it, or to delete your account and everything linked to it. We'll do it within 30 days.
Sharing
We don't sell or rent personal information. We share it only with the services needed to run the project (Netlify for hosting and Stripe for payments), or when required by law.
Security
All traffic uses HTTPS, your Brightspace session stays on your own computer, and the app can only read from Brightspace, never write. No system is perfectly secure, but if a breach ever affects your information we'll tell you and the authorities as the law requires.
Children
The project is meant for college and university students. It isn't directed at children under 13.
Changes
If this policy changes, the date at the top changes too. Significant changes will be announced to Pro users by email before they take effect.
Contact
Privacy questions or requests: use the contact form.
If you're in Canada and aren't satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada.