---
title: Privacy - Grademaxxing
description: How Grademaxxing handles credentials, sessions, local caches, and referrals — without keeping your StudentVUE password on our servers.
url: https://grademaxxing.app/privacy
lastmod: 2026-10-10
---

# Privacy - Grademaxxing

> Grademaxxing keeps the convenience of a persistent sign-in without putting your StudentVUE password on our servers.

## Signing in

Your browser sends your credentials over HTTPS to the Grademaxxing server. The server uses them to establish a session with the official StudentVUE portal, then discards the password. It is never written to our disk, logs, or server session.

## While you are signed in

The active StudentVUE session state is encrypted and authenticated inside a secure, HTTP-only app cookie for up to 12 hours. The server uses it only to proxy read-only student information, and browser scripts cannot read it.

## Local data and signing out

If you choose Keep me signed in, your district, username, and password are encrypted on this device. The encryption key is held in IndexedDB as a non-exportable browser key, while only ciphertext is stored in browser storage. Grade data used by the interface may also be cached on your device. Signing out deletes the active server session, saved credentials, and local caches.

## Invite-only referrals

Invited referrers are created privately by the administrator using their name and email. Visitors opening a referral link go directly to the standard StudentVUE sign-in and are counted only if a one-way protected student key shows they are a new user. No referred student name or email is stored, and referral attribution stays separate from StudentVUE credentials, grades, and school records.

## Sitemap

See the full [sitemap](https://grademaxxing.app/sitemap.md) for all pages on grademaxxing.app.