Legal

Privacy Policy

Updated July 2026

This policy explains the privacy boundaries for AI Rubric Generator accounts, rubric prompts, payment records, cookies, analytics fallback, and support requests.

Service purpose

AI Rubric Generator helps educators create, edit, and copy rubric drafts. The service is intended for educators, instructors, trainers, and course creators, not for children to use directly.

Do not enter student personal information

Do not submit student names, emails, grades, health details, accommodations, discipline records, identifiers, or other personal information.

Information you provide

The generator may process assignment title, subject, grade or proficiency level, criteria count, score style, and extra requirements you type into the form.

AI API processing

If AI generation is connected, prompt fields may be sent to the configured AI service provider to generate rubric drafts. Do not enter student personal information. Provider identity, retention, training use, and region remain subject to the configured production provider.

Google account data

Google login stores account email, display name, avatar URL, OAuth provider name, and provider user id in the D1 users table so the service can identify the account and attach Free or Pro access.

Session cookies

The airubric_oauth_state cookie is used for Google OAuth state validation and lasts about 10 minutes. The airubric_session cookie is used for account login sessions and lasts up to 30 days. These cookies use Path=/, HttpOnly, SameSite=Lax, and Secure on HTTPS. Logging out clears the session cookie and removes the server session record.

D1 account and entitlement records

D1 sessions store session id, user id, expiration, created, and updated timestamps. D1 entitlements store plan, status, daily limit, monthly limit, source, provider order id when applicable, optional expiration, and timestamps for Free or Pro access.

PayPal payment records

PayPal checkout stores local payment_orders records with user id, provider, provider order id, status, amount, currency, plan, return/cancel URL metadata, and timestamps so support can reconcile Pro access and refund requests against PayPal transaction records.

Cookies and analytics

Current frontend telemetry may write browser window.dataLayer events such as page views or rubric generation events as a frontend fallback. These fallback events are not sent to a third-party analytics provider unless a provider such as GA4, GTM, Clarity, or another analytics service is configured for production.

User rights and contact

For access, correction, deletion, support, privacy, refund, or account questions, contact support@airubricgenerator.online. For refund-specific information, review /refund.

For privacy, payment, refund, or account questions, contact support@airubricgenerator.online.