Privacy Policy — Subscription Tracker

1. Information We Collect

To provide subscription tracking and capture, the extension may handle:

• Subscriptions you save — name, price, currency, billing cycle, next charge date, notes, colors, and related fields you enter or confirm.
• Extension settings — reminder offsets, auto-capture opt-in, domain blacklist, and UI preferences.
• Reminder state — which renewal notifications were already shown (stored locally for alarms you enable).
• Web page text (user-initiated only) — when you press ⌖, use the keyboard shortcut (Ctrl+Shift+S / Command+Shift+S), enable auto-capture and click a billing control, open billing from the extension, or paste email text into Add — the extension reads visible page or pasted text only on that action to suggest subscription fields.
• Mobile import payloads (optional) — if you start a mobile import session and agree to the relay disclosure, text or a screenshot you send from your phone is uploaded to a temporary relay so the desktop extension can receive it once. Screenshots may be sent to an OCR provider for text extraction.

We do not collect passwords, payment card numbers, or credentials. Do not use mobile import for secrets you are unwilling to send through the temporary relay.

2. How We Use Your Information

Information is used only to operate features you request:

• Display and edit your subscription list in the side panel.
• Prefill capture forms from billing or checkout pages you choose.
• Show renewal reminders via Chrome alarms and notifications.
• Detect duplicates and offer update instead of creating a second entry.
• Transfer optional mobile import data from phone to desktop once per session.

We do not use your data for advertising, interest-based profiling, or marketing analytics.

3. Data Storage, Security & Interface Usage

Local storage (chrome.storage.local)

Your subscription list, settings, and reminder state are stored on your device using Chrome’s extension storage APIs. Uninstalling the extension removes this local data unless you use Chrome sync features outside our control.

Side panel (sidePanel permission)

The side panel is the main UI for your list, capture cards, Add/Edit forms, and settings. It runs as part of the extension — not as a remote website inside the panel.

Tabs & scripting (tabs, scripting permissions)

Used to run capture logic on the active tab when you trigger capture or billing actions, and to open pages you explicitly request (for example a billing portal link or the welcome page on first install).

Host access (<all_urls>)

Broad host permission is required because subscriptions can live on many merchant and checkout domains. The extension does not read arbitrary sites in the background. Access is tied to user actions such as ⌖, hotkey capture, opted-in auto-capture, or opening billing from the extension.

Mobile import relay (optional network transfer)

When you use mobile import, payload data is sent to a Cloudflare Worker relay operated for this extension. Sessions are short-lived (about 10 minutes), consumed once on the desktop, and deleted automatically. Screenshot imports may call OCR.space to extract text; only the image you submit is processed for that request.

Core subscription data stays on your device. Network transfer is limited to optional mobile import (and standard HTTPS requests such as loading this policy page).

4. Limited Use Disclosure

Use of information received through Chrome extension APIs follows the Chrome Web Store User Data Policy, including Limited Use requirements:

• Allowed use — only to provide or improve subscription tracking and capture (the extension’s single purpose).
• Allowed transfer — to the mobile import relay and OCR provider only when you start mobile import; otherwise data stays on-device except as required by law or for abuse investigation.
• Prohibited advertising — we do not use or transfer user data for personalized or interest-based ads.
• Prohibited human reading — we do not routinely read user content. Limited exceptions: your explicit support request, security investigation, or legal obligation.

5. Third-Party Sharing

We do not sell your personal data. Limited third parties may process data only as follows:

• Cloudflare Workers — temporary mobile import relay (session payloads, auto-deleted).
• OCR.space — optional screenshot text extraction during mobile import only.
• Google Forms — optional uninstall feedback if you choose to submit the form on our uninstall page (governed by Google’s privacy policy).
• GitHub Pages — hosts this welcome, privacy, and uninstall documentation (static pages; the extension does not send your subscription list to GitHub).

We do not use advertising networks or tracking pixels in the extension UI.

6. Your Rights: Access & Deletion

• Access — view and edit all saved subscriptions in the side panel at any time.
• Deletion — delete individual subscriptions in the app, clear data in extension settings where available, or uninstall the extension to remove local storage.
• Mobile import — each session is one-time; after successful import the relay session cannot be reused. You can decline mobile import and use manual Add or email paste instead.
• Opt-out of auto-capture — turn off auto-capture in settings; capture then requires your explicit ⌖ or hotkey action.

7. Automatic Navigation (Installation & Uninstall)

First install

On first installation, the extension may open our welcome page in a new tab:

https://promoseptika-sudo.github.io/subscription-tracker-pages/welcome.html

This page is informational only. The extension does not attach your subscription data to that request. No tracking identifiers are added beyond a normal browser page load.

Uninstall

When configured, Chrome may open our uninstall feedback page with an optional Google Form. Submitting the form is voluntary; answers go to Google, not into your local subscription list.

8. Permissions Reference

• storage — save subscriptions and settings locally.
• sidePanel — main subscription list and capture UI.
• tabs — active tab context for user-initiated capture and billing.
• scripting — inject capture helpers when you start capture.
• alarms — schedule local renewal reminders.
• notifications — show renewal reminders you configure.
• host_permissions (<all_urls>) — read merchant pages only on your capture/billing actions.

9. Contact Us

For privacy questions or support, email Promoseptika@gmail.com. The same address is listed as the developer contact on the Chrome Web Store listing for Subscription Tracker.