Web Store details
FPS Device · Fairfield Public Schools
What to enter in the Chrome Web Store Developer Dashboard
For the person publishing the extension. The answers below come from the same file as the privacy policy, so the listing and the policy cannot disagree — a Web Store reviewer compares them.
Addresses
| Homepage URL | https://extensions.fairfieldschools.org/fps-device/ |
|---|---|
| Privacy policy URL | https://device.fairfieldschools.org/privacy |
| Terms of use URL | https://device.fairfieldschools.org/terms |
| Support | mailto:reghelp@fairfieldschools.org |
Store listing
| Name | FPS Device |
|---|---|
| Short description | Device management and check-ins for District Chromebooks: keeps inventory, assignments and repairs accurate. (108/132) |
| Status here | Published |
| Item ID | dadpbhhflebfoemfphipnaenoofncgjk |
Privacy practices tab
Single purpose
FPS Device is the device-management client for computers owned by Fairfield Public Schools, a public school district. Its single purpose is accounting for district devices: which district-managed Chromebook a district account is signed in to, the student’s periodic confirmation that the device they hold is the one assigned to them, and how district devices are used - active time and, where the district turns it on, time per website (the address of the focused tab, without query strings), which the district uses for screen-time reporting and for knowing how many licensed seats are in use. It is force-installed by Google Admin policy on district Chromebooks and managed browsers, and published privately to the fairfieldschools.org domain; it is not usable by the general public. It does not modify web pages, inject content scripts, or interact with any site.
Permission justifications
| Permission | Justification |
|---|---|
tabs | Screen time, where the District turns it on: the address of the tab in front of the user (without its query string) and whether it is playing sound. No page content or titles. |
identity, identity.email | To know which District account is signed in. |
enterprise.deviceAttributes | To read the device’s serial number, asset tag and directory ID on a District-managed Chromebook. |
enterprise.networkingAttributes, networking.onc | To read the device’s network addresses and Wi-Fi network, to tell which campus it is on. |
enterprise.platformKeys | To prove, through Chrome Verified Access, that the device is a genuine District Chromebook. |
idle | To tell whether the device is in use (no page content is read). |
notifications | To show check-in reminders. |
storage, alarms | To keep its settings and a short queue of events while offline, and to report on a schedule. |
device.fairfieldschools.org (site access) | To report to the Device Portal, and to run on the portal’s own device-debug page. |
Host permission
The extension communicates only with the district’s own systems on fairfieldschools.org (device.fairfieldschools.org and its Cloudflare edge, cb-edge.fairfieldschools.org). The domain wildcard lets the district move the endpoint within its own domain through managed policy without a new release. No other host is contacted, and no content script is injected into any page.
Remote code
No. All code is packaged in the extension.
Data usage
| Category | How it is used |
|---|---|
| Personally identifiable information | The district account email, and the device serial and asset tag tied to the person using it. |
| Location | The device’s IP addresses and Wi-Fi network, to tell which school building it is in or that it is off-site. |
| Web history | Where the district turns screen time on: the address of the focused tab (site and path; no query string, fragment or credentials), when and for how long. Searches are counted, never their terms. Raw visits 30 days, then an encrypted archive (400 days); per-address totals 90 days; per-app totals 400 days. |
| User activity | Sign-in and sign-out events, heartbeats, active time per account from the idle state, and time per website (see Web history). |
Certify all three statements: the data is not sold or transferred to third parties outside the approved use cases; not used or transferred for purposes unrelated to the single purpose; not used or transferred to determine creditworthiness or for lending.