Our data paradigm

What data we hold

• Public catalog data: course codes, titles, descriptions, prerequisites, and offering history, gathered from each school's public course catalog. This is factual information about courses, not about people.
• Aggregate grade distributions: where a school publishes them or makes them available through public-records channels, we show the distribution of grades for a section or term as counts and percentages. We also show student-reported grade distributions from course-feedback surveys when available, labeled “Student-reported.” These are group statistics. They are not tied to any student.
• Public course ratings: coarse, aggregate signals drawn from public sources, shown under a general community label, never attributed to a named individual reviewer.
• Optional account data: if you sign in with a school email to post, we store your email, a small profile, and what you post. We email you about once a month with what we shipped, and you can turn that off in your settings or from any of those emails. Browsing needs no account, and your school, courses taken, and plans stay in your own browser. Full detail is in our privacy notice.

FERPA: why our data is not protected education records

The Family Educational Rights and Privacy Act (FERPA) protects a student's education records: personally identifiable records that a school or its agents keep about that individual student, such as their transcript, grades, and enrollment. It governs institutions that receive federal funding and the records they hold about identified students.

CourseTrees is not a school, and we do not hold education records. The two kinds of data we display are different in kind from a protected record:

• Public catalog data describes courses, not students. A course description or a prerequisite list is not personally identifiable information about any individual.
• Aggregate grade distributions describe a group, not a person. A statement that a section of 120 students earned 30% A grades says nothing identifiable about any one of them. FERPA itself treats properly de-identified, aggregated information as outside the definition of a protected record, as long as a student cannot reasonably be identified from it.

The key safeguard is de-identification. To keep aggregate data from becoming re-identifying, we apply the minimum cell-size floor described next.

Our grade-suppression floor: a minimum cell size of 5

We never display a grade distribution for a group small enough to risk re-identifying a student. Our floor is a minimum cell size of 5. If the number of students behind a distribution, or behind a cell within it, falls below 5, we suppress it rather than show it.

Small groups are where aggregate data stops being anonymous. In a section of three students, a single grade can point to a single person, especially when someone already knows who was enrolled. A floor of 5 is a widely used threshold for reporting aggregate education and health statistics without exposing individuals. We treat it as a hard minimum, not a goal.

GDPR: rights for people in the EU and EEA

The General Data Protection Regulation (GDPR) governs the processing of personal data of people in the European Union and European Economic Area. Most of what we show is not personal data at all, but the account data of a signed-in user is, and we treat it accordingly. If GDPR applies to you, you have the right to access the data we hold about you, to have wrong data corrected, to have your data erased, to restrict or object to certain processing, and to receive your data in a portable format.

We rely on your consent, given when you choose to sign in and post, and on our legitimate interest in running a study aid, as our bases for processing the small amount of account data we hold. We do not sell personal data and we do not use it for advertising. To exercise any right, email contact@coursetrees.com.

CCPA and CPRA: rights for California residents

The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives California residents rights over their personal information. If you are covered, you have the right to know what personal information we collect and how we use it, to delete the personal information we hold about you, to correct inaccurate information, and to opt out of the sale or sharing of personal information.

We do not sell or share personal information as those terms are defined by the CCPA and CPRA. There is nothing to opt out of on that front, and we will not start selling your data. To make a request, email contact@coursetrees.com. We will not treat you differently for exercising any right.

Data minimization

We collect as little as the site needs to work. Browsing requires no account. If you don't sign in, your school, the courses you mark as taken, and any plan you build stay in your own browser and are never uploaded to us. Our analytics strip course, plan, and other student-specific values from the URL before recording a page path, we don't send raw search text or course titles, and we don't run session recording. If you sign in, those events are linked to your account id, never your name or email. If you never sign in, we hold no account for you.

How Cam works

Cam's answers are written by Claude, a language model from Anthropic, a third-party AI provider that runs the model on our behalf. When you ask a question, Cam first looks things up in CourseTrees: courses, prerequisites, requirements, schedules, campus clubs and events, and grade distributions, reviews and workload if your school email is verified. It sends your question, with what it found, to Anthropic, and the answer may name only courses those lookups returned. The courses it used are listed under the answer so you can check them.

Every question you ask Cam goes to Anthropic, including the ones you ask without signing in. Anthropic never receives your name, your email address or your account id. Crisis language, and requests for someone's contact details or for graded work, get a fixed reply that is sent nowhere. Each answer takes a model run on Anthropic's servers on top of our own database reads, so it uses more energy and water than loading a page, and we do not publish a figure we have not measured.

An earlier version of Cam answered most questions without a language model, and this section described that version. Cam now runs on Claude for every question, so we rewrote the section to match.

Here is where Cam stops:

• If a lookup finds nothing, Cam should say so. An answer that names a course code no lookup returned is rewritten, or carries a note that the code could not be confirmed.
• If a school is missing a dataset, Cam says what is missing instead of filling the gap. Many schools have no concentration data at all, and coverage varies everywhere.
• A language model can be wrong even when it sounds sure, and an answer is only as good as the catalog rows behind it. Catalogs and our prerequisite parsers both contain mistakes.
• Cam does not rank or rate professors, and it shows grade distributions, reviews and workload only to students with a verified school email.
• Cam is a study aid. Confirm anything that matters against the official catalog and your advisor before you register.

Cam's lookups read the same catalog, grade and ratings data described above, scoped to the school you are viewing, through the same access controls as the rest of the site. What is sent to Anthropic and what we keep when you ask is set out in our privacy notice.

How we treat catalog sources: robots and Terms

We gather public catalog data with automated tools, at a respectful rate that does not burden a school's systems, and we attribute each source with a link back to the official catalog. Before we add a source, we review its published Terms and its robots rules, and we design our collection to stay within normal, respectful use rather than aggressive bulk harvesting. When a source signals that automated access is not welcome, we respect that signal. Coverage varies by school as a result, and we would rather have less data than data we should not have taken.

The ACM Code of Ethics

We hold ourselves to the professional standards in the Association for Computing Machinery (ACM) Code of Ethics and Professional Conduct. In practice that means:

• Avoid harm. We weigh the effect of our data choices on students, and we suppress anything that could identify an individual.
• Respect privacy. We collect the minimum, keep personal data out of what we publish, and protect the little account data we hold.
• Be honest and trustworthy. We describe our data and its limits plainly, including where coverage is thin or a source is only the catalog.
• Respect the work and rules of others. We attribute sources and follow their Terms and robots rules.

Opt-out and takedown

We provide a clear way to have data changed or removed:

• Instructor or individual opt-out. If you are an instructor or an individual and you want data associated with you removed or excluded, email contact@coursetrees.com and we will act on it.
• Per-source takedown. If you represent a university or a data source and you want data corrected or removed, email contact@coursetrees.com. We will respond promptly and, where appropriate, stop collecting from that source.
• Correcting a specific course. If a course detail looks wrong, use the report button in any course panel, or email us.

Contact

Questions, opt-out requests, and takedown requests all go to the same inbox. Email contact@coursetrees.com.