From the first moment you use Canvas Badges/Credentials, we're collecting personal data. Sometimes you provide us with personal data, sometimes that personal data is automatically collected and sometimes a third party might provide the personal data, such as an achievement you've earned. This information includes, but is not limited to, contact information, information about how you use Canvas Badges/Credentials and log data. To see what kinds of information Canvas Badges/Credentials collects, read the privacy policy . You may also wish to review the terms of service.

Privacy and 3rd parties

Thousands of organizations around the world trust Canvas Badges/Credentials to award Open Badges to recognize achievements. Canvas Badges/Credentials works to give badge recipients control over their privacy and how their data is used. Badges may be shared to social media or on personal websites, for instance, but we do not publish any public index of the badges a particular user has earned.

Canvas Badges/Credentials does not sell any personal information to any party or share information to any third party outside of the badge sharing capabilities in the app.

Canvas Badges/Credentials privacy policy and  Canvas Badges/Credentials for Canada privacy policy

FERPA

FERPA restricts the student data that educational institutions may share with web services and the public. Minimal personal data about students is shared with Canvas Badges/Credentials when educational institutions award badges to those students. Make sure your use of Canvas Badges/Credentials is consistent with the information permitted by your FERPA directory information disclosure categories to be shared with our services and to be published in awarded badges. Typically, institutions ensure student email addresses and academic awards or honors are permitted to be shared. When you use Canvas Badges/Credentials to award badges, either manually or automatically through Canvas Badges/Credentials for Canvas, ensure that the data stored in badges is consistent with your institutional policy. This may mean bypassing the evidence features to include data that doesn't fall under directory information disclosures, such as grades or graded work.

Canvas Badges/Credentials users below age 13 The Children's Online Privacy Protection Act  restricts the type of information about young users that may be stored on a web service, including identifiers like email addresses, without obtaining permission from parents/guardians. We don't provide specific legal advice to organizations seeking to use Canvas Badges/Credentials, but we can be clear about what information is stored on database and caches. We store a small amount of student information as it's reported to us. That includes the email address of the recipient, but not the name, unless you are using the optional leaderboard feature and the student checks the opt-in box, sharing their real name. Otherwise, we only store the email address that Canvas reports to us. All students who view Canvas Badges/Credentials via the Canvas app will be able to see badges they've earned and follow their progress through courses. In a future version, we'll be implementing an upgraded workflow for under-13 users.
Schools or districts may obtain permission from parents/guardians for their students to use web services such as Canvas Badges/Credentials. Users are responsible for ensuring that the data they share with web services about their students is allowed by parents/guardians.