Legal
Privacy Policy
Last updated September 11, 2026
1. About TritonPath
TritonPath is the app at tritonpath.com. Questions: Contact or judahworkflow@gmail.com. Short version for students: At a glance.
2. Information collected
What is stored depends on how you use the app.
Account
Sign in with Google or email (login link or password). We store that email and an optional display name. The display name is for your Profile only — it is not shown on reviews. Google sign-in is handled by Google; we receive the ids it shares (usually email and a provider user id). Email passwords are stored as a hash. Login links and password-reset mail are sent through Supabase when you ask for them. We do not collect UCSD credentials or log in to any UCSD system on your behalf.
What stays on your device
Letter grades (Profile → History) and home / dorm stay in this browser. They are not in our database and will not appear on another device. In Otto Chat you can Allow once or Always allow a Progress GPA share for that reply; Always allow is this browser only and can be turned off on Profile → History.
Your plan
Signed-in students choose where Gradplan, Scheduler, and Chat threads live. Switch anytime in Profile. Letter grades and home / dorm always stay on this device, in either mode. Chat message limits apply either way.
Saved to your account
The usual option. College, major(s), minor(s), courses, AP credit, Scheduler drafts, and Chat threads sync on any device you sign in on. You can write reviews. Other students cannot see your plan unless you copy a Scheduler compare link. That copy lives in TritonPath’s database so the planner still works after you switch phones. Profile → Keep plan on this device removes the cloud copy later if you change your mind. Saved plans can include:
- College, major(s), minor(s), graduation term, transfer / IGETC flags, interest tags
- Courses you add, terms, and AP credit — not letter grades
- Scheduler drafts: cart, section picks, lock/hide, colors, busy times
- Chat threads with Otto (not the per-message usage counters)
- Import metadata (filename, size, institution, how many courses) — not the PDF
This browser only (signed in)
Choose this during first-sign-in setup, or later in Profile → Keep plan on this device. We keep the account (email) and delete the cloud copy of Gradplan, Scheduler, Chat threads, college, major, and import metadata. That plan then lives in this browser. It will not sync to another phone or browser. Chat message limits still apply. You can still read reviews; writing them is off until you save the plan back to the account. Clearing this site’s data, a new phone, or a private window loses it. Profile → Save plan to account copies it back into the database.
Reviews
Signed-in students can read ratings and text. Other users cannot see your name, email, or account. Reviews use a one-way code, not your account id, so they are secure in the database — other students, professors, and UCSD cannot look up who wrote them. The database alone cannot show who wrote a review. Our server holds a secret that could recompute a mapping; we do not share it.
One review per professor and per class. You can edit or delete yours, or report someone else’s. Reports are anonymous too. An optional grade is for that class, not your Profile grades.
Guest use
You can plan without an account. Guest plans stay in this browser until you sign in or send them through Contact. Guests cannot use Scheduler or Chat.
Transcript and audit imports
If you upload or paste a transcript, audit, or AP text, we extract course lines so you can apply them. The PDF is not kept. Import text is not logged. Parsed courses (without letter grades) and the metadata above may be kept. A letter from an import can mark a course completed, then stays on your device. We do not log in to MyTritonLink, WebReg, or other UCSD systems to fetch files. Only upload records you are allowed to use.
Contact messages
The form sends your name, email, and message through FormSubmit.
Technical and usage data
Hosts and analytics may see IP, browser, pages viewed, and timings. Vercel Analytics is for traffic — not ads. Logs and Upstash Redis may keep request metadata briefly (for example rate limits keyed to your account). Chat stores a per-account message count and token estimate so daily and monthly limits apply in both storage modes — not the message text, unless you save the plan to the account. Transcript text is not written there. Map tiles are loaded from Esri and UC San Diego campus GIS; those hosts see the request, including IP.
3. How information is used
- Run the planner (catalog, Progress, Gradplan, Scheduler, Chat, Map, reviews)
- Sign you in and sync your plan
- Parse imports you submit
- Show reviews without showing who wrote them
- Reply to messages
- Send sign-in and password-reset mail when you ask
- Keep the service up and fix bugs
- Comply with law when required
We do not sell your information, use it for ads, or send marketing mail.
6. Security
Traffic uses HTTPS. Passwords are stored as a hash, not the password itself. Reviews and reports use a one-way code instead of your account id. Database rules keep one student’s plan from being read by another. No method of transmission or storage is 100% secure.
7. How long it is kept
Account and plan data until you delete the account or the service closes. Chat usage counts stay with the account so limits still work. Reviews and reports go with the account. Home/dorm and letter grades until you clear site data. Guest data until you clear it. Contact messages long enough to reply. Logs, analytics, and rate-limit counters only as needed.
8. Your choices
- Access and edit — change your plan in the app
- Reviews — edit or delete yours in Catalog
- Delete account — Profile → Delete account (cloud plan if any, this browser’s copy, drafts, Chat threads, reviews, and reports)
- Plan storage — Profile → Keep plan on this device (deletes the cloud copy) or Save plan to account (syncs again)
- Guest data — clear this site’s storage
- Google sign-in — disconnect TritonPath in your Google account
If delete fails, use Contact.
9. Children
Meant for college students. We do not knowingly collect information from children under 13. If you are under 18, use the service with a parent or guardian. Use Contact if a child under 13 has an account.
10. California privacy
We do not sell or share personal information for advertising. California residents may request to know, correct, or delete information we hold, subject to legal exceptions. Use Profile delete, or Contact. We will not discriminate for exercising those rights.
11. Education records
TritonPath is not UC San Diego and is not a school official. We do not collect UCSD credentials or log in to any UCSD system on your behalf. If you import a transcript, you are sending it to an independent tool. Letter grades and home/dorm stay on your device. Remaining account data is private. It is not an official university record, and not a substitute for MyTritonLink, WebReg, or advising.
12. Other sites
The app can link out — for example Google Maps walking directions or university pages. Those sites have their own policies. We do not control them.
13. Changes
We may update this policy. The date at the top will change. Material changes will be posted here. Continued use means you accept the revised policy.