Data collected by the extension

What the extension reads

• Cookies on the skool.com domain (authentication session).
• The x-aws-waf-token header on requests your browser sends to Skool.
• Your browser User-Agent.

Why

Skool has no public API. To let RecessLab back up your classrooms and post on your behalf, the extension captures the authentication material your browser already uses.

Where it goes

This data is sent exclusively to recesslab.io over HTTPS, and encrypted at rest in our Supabase database. No third party has access.

What the extension does NOT do

• Read no site other than skool.com.
• Capture page content.
• Load any remote code.

Revocation

At any time from /settings/extensions or by uninstalling the extension via chrome://extensions.