Privacy Policy

1. Information We Collect

1.1 Personal Information (via Authentication)

Important: When you sign up with email/password, we collect your password. Your password is securely hashed using industry-standard encryption before storage. We never store or have access to your plain text password.

a) Via Email/Password Authentication:

• Email address
• Password (securely hashed - never stored as plain text)
• Name (optional, if provided)
• User ID (unique identifier for your account)
• Authentication tokens (stored locally on your device)

b) Via Google Sign-In:

• Email address
• Google profile name and picture
• User ID (unique identifier for your account)
• Authentication tokens (stored locally on your device)

1.2 Usage Data

• Subscription/plan status (free or premium)
• Scrape count and export count
• Export format preferences (CSV, JSON, Google Docs)
• Extension settings and preferences

1.3 Technical Data (collected automatically)

• IP address (collected by third-party analytics)
• Browser type and version
• Extension version
• Timestamp of activities

1.4 Reddit Content (accessed but not stored on our servers)

• Reddit comments from pages you actively scrape
• Comment metadata (author, timestamp, score, permalink)
• Thread information (title, URL, subreddit)

1.5 Data We Do NOT Collect

• Reddit login credentials (your Reddit account password)
• Your general browsing history
• Payment card information (handled securely by Lemon Squeezy)
• Data from websites other than Reddit (except when you export to ChatGPT/Claude)
• Plain text passwords (we only store securely hashed versions)

2. How We Use Your Data

We use collected data to:

• Enable the "Export to Google Docs" feature
• Manage your subscription and premium feature access
• Provide customer support
• Analyze usage patterns to improve the extension
• Identify and fix bugs or technical issues

We do NOT sell, trade, or rent your personal information to third parties or advertisers.

3. Data Sharing

We share your data with the following third-party services to operate the extension:

3.1 Services We Share Data With

• Supabase — We share your email, profile name, and account data for user authentication and database storage. Supabase Privacy Policy
• Google OAuth — We share authentication requests for sign-in and Google Docs export. Google Privacy Policy
• Lemon Squeezy — We share your email for payment processing. They handle all billing securely. Lemon Squeezy Privacy Policy
• PostHog — We share anonymous usage events for analytics. PostHog Privacy Policy

3.2 Legal Disclosure

We may disclose your data if required by law, court order, or government request, or to protect our rights, property, or safety, or that of our users.

3.3 User-Initiated Sharing

When you choose to export data to Google Docs, ChatGPT, or Claude, that data is shared with those services according to their respective privacy policies.

4. Data Storage & Security

4.1 Local Storage (on your device)

• Scraping history
• Authentication tokens (in Chrome's secure storage)
• User preferences and settings

4.2 Cloud Storage (on our servers via Supabase)

• Account data (email, name, profile picture)
• Subscription status and payment details
• Usage statistics (scrape count, export count)

4.3 Security Measures

• All data transmissions use HTTPS/TLS encryption
• Authentication uses secure token-based systems
• Supabase provides row-level security for database protection

5. Data Retention

• Active accounts: Data is retained while your account is active
• Inactive accounts: Data may be deleted after 12 months of inactivity
• Deleted accounts: All data is permanently deleted within 30 days of your deletion request

You may request deletion of your data at any time by contacting us.

6. Permissions Explained

• activeTab: Access the current Reddit page when you click the extension
• scripting: Extract comment data from Reddit pages
• storage: Save preferences and history locally on your device
• identity: Optional Google Sign-In for Docs export and account features
• Host permissions (reddit.com): Read publicly available Reddit content
• Host permissions (chatgpt.com, claude.ai): Enable one-click export to AI chat services
• Host permissions (supabase.co): Communicate with our backend for authentication and data sync

7. Your Rights

You may request:

• Access: A copy of your stored personal data
• Correction: Fix inaccurate or incomplete data
• Deletion: Remove your account and all associated data
• Portability: Export your data in a machine-readable format
• Opt-out: Disable analytics tracking (contact us for instructions)

8. Children's Privacy

Reddit Scraper is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children. If we become aware that a child under 13 has provided us with personal information, we will delete it immediately.

9. Updates to This Policy

We may update this policy to reflect product or legal changes. When we make changes, we will update the "Last updated" date at the top. Continued use of the extension after changes constitutes acceptance of the updated policy.

10. Reddit Disclaimer

Reddit Scraper is an independent Chrome extension. We are not affiliated with, endorsed by, or sponsored by Reddit, Inc. We only access publicly available Reddit content that any user can view.

11. Chrome Web Store Compliance

11.1 Limited Use Disclosure

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Specifically, this extension:

• Only uses Google user data (email, profile name) for authentication and enabling the "Export to Google Docs" feature
• Does NOT transfer data to third parties except as necessary for core functionality (Supabase for authentication, Google for Docs export)
• Does NOT use data for advertising purposes
• Does NOT sell user data to any third parties
• Does NOT allow humans to read your data without your explicit consent

11.2 Location Data

We collect IP addresses automatically through PostHog analytics. IP addresses may be used to derive approximate geographic region for analytics purposes only. We do NOT collect precise GPS coordinates or detailed location data.