Privacy Policy

1. The short version

• We never store your browsing history.
• To look up a grade, the extension sends only a bare domain, like “example.com”.
• We do not sell or rent your personal information, and we do not show ads.
• Your own AI keys stay encrypted in your browser and are never sent to us.

2. What we collect

Without an account, we receive:

• the bare domain of a site when the extension looks up its grade (no path, no query string);
• the public text of a policy page you ask us to analyse, and its address, so the result can be reused for everyone;
• a random installation identifier, used only to apply fair daily limits on free use;
• a one-way hash of your IP address, used only for the same limits.

With an account, we also store:

• your email address and a securely hashed password;
• your display name, language and settings;
• if you turn on sync, the list of sites you checked and their grades.

3. How we use it

We use this information only to provide T&C Reader: to analyse policies, to keep your settings in sync, to prevent abuse, and to fix mistakes in our analysis. We do not use it for advertising and we do not build profiles of you.

4. AI providers

When you use the hosted analysis or chat, the public policy text and your question are sent to Google’s Gemini API to generate the result. When you use your own key, your browser sends them directly to the provider you chose, under that provider’s own terms. We do not allow our AI provider to use your questions to train its models where we can control it.

5. Who we share it with

We share information only with service providers that run T&C Reader for us:

• Supabase (database, accounts and servers);
• Google (the Gemini AI service for hosted analysis);
• Vercel (hosting this website).

If T&C Reader is sold or merged with another company, your information may transfer to the new owner, who must keep honouring this policy. We will tell you before that happens.

6. How long we keep it

Daily usage counters are deleted after 35 days. Account data is kept until you delete your account, then removed within 30 days. Policy analyses contain no personal information and are kept to serve future visitors.

7. Your rights and choices

You can see and change your profile and settings on your account page, export your data, or delete your account at any time. Depending on where you live (for example under the GDPR or the CCPA), you also have the right to access, correct, delete and port your data, and to object to processing.

We respect Global Privacy Control signals. We do not sell or share personal information for cross-context behavioural advertising.

8. Cookies

This website uses only the cookies needed to keep you signed in, and a local setting for your light or dark theme. There are no tracking or advertising cookies.

9. Children

T&C Reader is not directed to children under 13, and we do not knowingly collect their personal information.

10. Changes to this policy

If we change this policy in a way that matters, we will tell you in the extension and by email at least 30 days before it takes effect.

11. Contact

Privacy questions or requests: privacy@tcreader.app. We answer within 30 days.