Privacy Policy

Table of Contents

Privacy Policy for IDME PBD Helper

Last Updated: November 13, 2025 Developer: CikguAimeDotCom Contact: [aimansic97@gmail.com]

Overview

IDME PBD Helper is a Chrome extension designed to help Malaysian teachers automate the input of student performance data (PBD/UASA) in the Ministry of Education's IDME system.

Data Collection and Usage

What Data We Collect

1. License Information (PRO version only)

• License key for subscription validation
• License expiry date
• Validation status
• Storage: Locally in Chrome browser using chrome.storage.local API
• External transmission: License key is sent to our validation server ONLY during activation/validation

2. Device Fingerprint (PRO version only - NEW v3.1.0)

• What it is: A unique identifier generated from your browser/system characteristics
• Components used: Browser type, screen resolution, timezone, platform (NO personal information)
• Purpose: Prevent license key sharing (limit: 3 devices per license)
• Storage: Locally in Chrome browser using chrome.storage.local API
• External transmission: Device ID and device name sent ONLY during license validation
• Note: This is NOT tracking. It's only used to enforce the 3-device limit per license

3. Student Selection Data

• Student names (pulled from IDME system, not collected by us)
• Student selections (checkboxes)
• Custom Usaha settings per student
• Storage: Locally in Chrome browser only
• External transmission: NEVER transmitted externally

4. User Preferences

• Selected TP (Tahap Penguasaan) levels
• Ulasan categories
• Custom ulasan text
• Operation mode preferences
• Storage: Locally in Chrome browser only
• External transmission: NEVER transmitted externally

What Data We DO NOT Collect

• We DO NOT collect any personal information about teachers
• We DO NOT collect student grades or academic records
• We DO NOT track browsing history
• We DO NOT use cookies
• We DO NOT sell or share any data with third parties
• We DO NOT store any data on our servers (except license validation)

External Services

License Validation API (PRO version only)

• Service: Google Apps Script Web App
• URL: https://script.google.com/macros/s/AKfycbwGYWiSuJd2JjW17Az5JMRa2WWZ_r9-LwQQ0bsfJmqIEiJTQCTTFp4sD-oi8bmL4Qmb/exec
• Purpose: Validate PRO license keys and check expiry dates
• Data Sent: License key only
• Data Received: Validation status, expiry date, subscription status
• Security: HTTPS encrypted connection
• Data Retention: License validation logs retained for 90 days for support purposes
• Device Limit: Maximum 3 devices per license (anti-sharing protection)

Purchase/Renewal Page

• Service: External website (cikguaime.com)
• Purpose: License purchase and renewal
• Action: Opens external page when user clicks "Beli License" link
• Note: This is a separate website with its own privacy policy

Data Storage

All data is stored locally on your device using Chrome's storage API:

• Location: Chrome browser's local storage
• Persistence: Data persists across browser sessions
• Deletion: Data is deleted when extension is uninstalled
• Access: Only this extension can access its stored data

Data Security

• All external API calls use HTTPS encryption
• License keys are validated server-side using Google Apps Script
• No sensitive student data is ever transmitted externally
• All student data processing happens locally in the browser

User Rights

You have the right to:

• Access: View all stored data via Chrome DevTools → Application → Storage
• Delete: Remove all data by uninstalling the extension
• Control: Choose whether to use PRO features that require license validation
• Opt-out: Use FREE version without any external data transmission

Permissions Explanation

This extension requires the following Chrome permissions:

1. activeTab

• Why: Access current tab to interact with IDME system forms
• Usage: Read student names from tables, select TP radio buttons, fill Usaha Murid dropdowns, interact with Ulasan Guru dialogs
• Limitation: Only active when you click the extension icon

2. storage

• Why: Save your preferences and license information locally
• Usage: Store TP selections, custom ulasan text, license key, student selections, Kemahiran settings
• Location: All data stored locally on your device

3. scripting

• Why: Inject automation scripts into IDME pages
• Usage: Automate form filling on Ministry of Education websites

4. *host_permissions (*.moe.gov.my, .gov.my)

• Why: Extension only works on Malaysian government education sites
• Usage: Access IDME/SPPB systems for automation
• Limitation: Cannot access any websites outside moe.gov.my domain
• Note: Extension remains inactive on all non-MOE websites

Children's Privacy

This extension is designed for teachers (adults) and does not knowingly collect information from children. Student names displayed are pulled from the IDME system and stored only locally.

Changes to Privacy Policy

We may update this privacy policy from time to time. Updates will be posted on:

• Chrome Web Store listing
• GitHub repository
• Extension update notes

Data Breach Policy

In the unlikely event of a data breach affecting license validation:

• Users will be notified within 72 hours via Chrome Web Store listing
• Affected users will receive new license keys free of charge
• Security measures will be immediately enhanced

Contact Us

If you have questions about this privacy policy:

• Website: https://www.cikguaime.com
• Email: aimansic97@gmail.com
• Support: Contact via Chrome Web Store support tab

Compliance

This extension complies with:

• Chrome Web Store Developer Program Policies
• Google's Privacy Policy requirements for extensions
• Malaysian Personal Data Protection Act 2010 (PDPA)

Consent

By installing and using this extension, you consent to:

• Local storage of preferences and settings
• License validation via external API (PRO version only)
• Processing of data as described in this policy

You can withdraw consent at any time by uninstalling the extension.