Privacy Policy

This Privacy Policy explains how Eternitytek ("we", "us") handles information when you use the ScormEtek Canva App and its supporting services. Our goal is to collect as little as possible, hold it as briefly as possible, and never sell it.

Summary

• We don't have user accounts. There's nothing to sign up for, no password to forget.
• Your design content stays in your browser. SCORM packaging happens entirely client-side; we never read the images, text, audio, or quizzes inside your Canva design.
• The download relay holds bytes for 60 seconds. Canva's iframe blocks direct file downloads, so we briefly stage the zip on our server to hand it to your browser. Bytes are deleted on first download and at 60 seconds, whichever comes first. We do not read them, scan them, or keep copies.
• No analytics, no tracking cookies, no third-party trackers on this website or inside the App.
• We don't sell data. We have nothing to sell.

What information we process

Inside the Canva App

When you open ScormEtek inside Canva, the App reads the list of pages in your current design (via Canva's public Apps SDK) so it can export them into a SCORM package. Everything the App does — thumbnail rendering, packaging, zipping — runs in your browser tab. Your Canva design content does not leave your browser except when you explicitly click Publish.

The publish download relay

When you click Publish inside Canva, the App posts the finished SCORM zip to a short-lived relay at canva.ibeatyoutothis.com/relay. The relay holds the bytes in memory only, keyed by a random one-time token, for up to 60 seconds. Canva's iframe sandbox blocks the standard browser download API, so this relay exists only to bridge the bytes into a normal browser tab that can save the file to your device.

• We do not log the contents of the zip.
• We do not scan, inspect, transcribe, or copy it.
• We do not persist the bytes to disk or to any database.
• Tokens are single-use; the bytes are deleted the moment you download them, or after 60 seconds if you don't.
• A container restart erases any in-flight staging.

Automatic technical logs

Our hosting provider (Coolify on a dedicated server) and our CDN (Cloudflare) produce standard HTTP server logs that may include your IP address, the HTTP method and path, the timestamp, the response status, and the user-agent string. These logs are used for operational purposes (debugging, abuse response, capacity planning) and are retained for no more than 30 days. They are not joined with any other data about you.

Email correspondence

If you email contact@eternitytek.com, we keep your message and our reply as long as needed to assist you and for a reasonable audit period afterward.

What we do not collect

• The names, emails, or identifiers of you or your Canva collaborators.
• The text, images, audio, captions, or quiz content of your designs.
• Device fingerprints, advertising IDs, or behavioral profiles.
• Any information stored in Canva's own user profile beyond what the Apps SDK surfaces at runtime (page list, page dimensions).

Third parties in the path

• Canva Pty Ltd. — hosts the App iframe and the Apps SDK. Their privacy policy governs their collection while you're inside Canva.
• Cloudflare — serves our web traffic, terminates TLS, and may record standard edge logs.
• Your chosen LMS — consumes the SCORM zip once you upload it. We have no visibility into or control over that.

We do not use Google Analytics, Meta/Facebook SDKs, Sentry, TikTok pixels, or any other third-party telemetry on this site or inside the App.

Cookies

This website sets no cookies of our own. Cloudflare may set a single __cf_bm cookie for bot management on its edge. The App itself, running inside Canva, does not set cookies.

Security

TLS is enforced for all traffic. The download relay holds bytes only in RAM, uses cryptographically random 256-bit tokens as capability keys, enforces one-shot consumption, and self-expires within a minute.

Your rights

Because we don't store personal data about you, there is typically nothing for you to access, correct, port, or delete. If you've emailed us, you can request deletion of the correspondence at any time by replying to the thread or writing to contact@eternitytek.com.

Children

The App is intended for use by authors producing training content for an LMS. It is not designed for or directed at children under 13, and we do not knowingly collect information from them.

Changes

If we update this policy, we'll change the "Last updated" date at the top. Material changes will be summarized at the top of this page.

Contact

Privacy questions or requests: contact@eternitytek.com.