Privacy Policy

Last updated: September 16, 2026

TL;DR: We don't sell your data. We only collect what's needed to provide the service. Your passwords are never stored.

1. Information We Collect

Account Information

Email address (for login and notifications)
Password (hashed, never stored in plain text)

Usage Data

Sites you track (site names only, no credentials)
Claim timestamps and success/failure status
Subscription status
A random extension installation identifier, version, edition, setup milestones, and days when you open the popup or dashboard

These product events help us measure installation, setup, and return visits. They are not a record of your browsing history. Signed-in product events can be associated with your account. Install requests also include network and browser information.

If you accept optional website analytics, public campaign labels in your setup link can be attached to a new installation during its first 24 hours. The labels describe the referring channel, campaign, and placement. We do not include email addresses, passwords, selected site lists, or full referring URLs in those labels. Declining analytics on the setup page clears locally retained campaign labels and labels waiting in the extension's delivery queue. Previously stored events are not changed.

What We DON'T Collect

❌ Passwords for any third-party site
❌ Your browsing history
❌ Page content beyond the visible reset timer and balance figure
❌ Keystrokes, mouse movement, or form input
❌ Personal financial information (payments handled by Stripe)

2. How We Use Your Information

To provide claim tracking and reminders
To sync your settings across devices
To send important service updates
To improve the Service

3. Data Storage & Security

Your data is stored securely using Supabase (built on PostgreSQL) with:

Row-level security (RLS) - you can only access your own data
Encrypted connections (TLS/SSL)
Regular backups

4. Third-Party Services

We use the following third-party services:

Supabase - Database and authentication
Stripe - Payment processing
Cloudflare - Website hosting and security
Umami - Optional website analytics, loaded after you accept

Each has their own privacy policy governing their handling of data.

5. Data Retention

We retain your data while your account is active. If you delete your account, we will delete your personal data within 30 days, except where required by law.

6. Your Rights

You have the right to:

Access your personal data
Correct inaccurate data
Delete your account and data
Export your data

7. Cookies

We use essential cookies for authentication and store your analytics preference in your browser. Optional website analytics starts only after you accept. Activity before acceptance is not replayed. We do not use advertising cookies.

8. Children's Privacy

The Service is not intended for users under 18. We do not knowingly collect data from children.

9. Changes to This Policy

We may update this policy. Significant changes will be communicated via email.

10. Contact Us

Questions about privacy? Email support@beatthespin.com