School-issued Chromebooks and school networks are set up to block many websites and apps, and that can include cameras and live video, even when you use the device at home. This page is for parents and for school IT staff.
For parents
- The easiest fix is a family device. A family computer or laptop with a personal browser profile works best. School Chromebooks often block cameras or live video, even at home.
- Use a personal Google account to sign in. School Google accounts for students under 18 are often blocked from signing in to outside apps. A personal or parent-made Google account avoids that.
- Phones and tablets work too. An iPad or Android tablet with Safari or Chrome can join. iPhones can't share their screen, so a laptop is better for longer sessions.
- If your child must use a school device, send the school's IT team the note below.
For school IT: what to allow
APX Learning Institute provides live one-on-one SAT tutoring in the web browser. Sessions are one tutor and one student; a verified parent may observe. Nothing needs to be installed.
- apxtutoring.com over HTTPS.
- rlxeqenfivypjanclfow.supabase.co over HTTPS and secure WebSockets (wss://). This carries sign-in, session state and call setup.
- stun.cloudflare.com, UDP 3478 (finding a network route).
- turn.cloudflare.com, UDP and TCP 3478, TCP 80, TLS 443 and 5349 (the relay that carries audio and video when a direct route is blocked).
- Camera and microphone permission for https://apxtutoring.com. On managed ChromeOS: add it to VideoCaptureAllowedUrls and AudioCaptureAllowedUrls.
- Screen capture for the same site (optional; students can upload a photo of their work instead).
- No TLS inspection for the hosts above. Live video breaks when traffic is decrypted and re-signed.
Email this list to your school IT team
The session room shows a diagnostic code when something is blocked. Include it if you contact us and we can tell you exactly which item failed.
"Your network blocks part of APX"
When the room says it's using a backup route, the call still works, just a little slower. If the room says your network blocks live video, try another network (home Wi-Fi instead of school Wi-Fi, or a phone hotspot) or a family device, or ask the network owner to allow the list above.
What this means for privacy
Calls go straight from browser to browser. When the relay is set up, students' and parents' connections always go through it, so their network address isn't shared with the tutor. Read the privacy policy for what the session room stores and for how long.