Privacy Policy

1. Introduction

Welcome to Toonify Toolkit ("we," "our," or "the Extension"). This Privacy Policy explains how we handle your information when you use our Chrome browser extension for text compression and token optimization.

Our Commitment: We believe in complete transparency. This extension is designed with privacy as a fundamental principle - all text processing happens locally on your device, and we do not collect or transmit your personal data.

2. Information We Do NOT Collect

Toonify Toolkit does NOT collect, store, or transmit:

• Text that you select or compress
• Websites you visit or URLs you access
• Your browsing history or habits
• Personal identification information (name, email, address, etc.)
• IP addresses or location data
• Any analytics or tracking data
• Cookies or similar tracking technologies

3. Local Storage

The extension uses Chrome's local storage API (chrome.storage.local) to store:

3.1 Compression History

• What: Your most recent compression result (original text, compressed text, token counts)
• Why: To display results in the extension popup for easy copying
• Where: Stored locally on your device only
• Retention: Automatically overwritten with each new compression

3.2 Usage Tracking (Free Tier Only)

• What: Daily compression count for free tier users (5 compressions per day limit)
• Why: To enforce the free tier daily limit
• Where: Stored locally on your device only
• Retention: Reset daily at midnight
• Data structure: { date: "2025-01-17", count: 3, totalUsage: 47 }

3.3 License Status

• What: License activation status and proof of purchase (for paid users)
• Why: To remember that you've purchased lifetime access
• Where: Stored locally on your device only
• Data structure: { isPaid: true, timestamp: 1705449600000, version: "2.0.0" }

Important: All this data is stored exclusively on your local device using Chrome's storage API. It never leaves your browser and is not synced to any external servers.

4. Chrome Permissions Explained

Our extension requires the following Chrome permissions. Here's exactly why we need each one:

4.1 contextMenus

Why we need it: To add right-click menu options ("Toonify Text", "Count Tokens") when you select text on any webpage.

What it does: Allows us to create context menu entries that trigger text compression.

Privacy impact: None. This permission only lets us add menu items; it doesn't access your data.

4.2 storage

Why we need it: To save your compression history, usage counts, and license status locally.

What it does: Stores data on your device using Chrome's local storage API.

Privacy impact: None. Data stays on your device and is not transmitted anywhere.

4.3 clipboardWrite

Why we need it: To automatically copy compressed text to your clipboard for easy pasting.

What it does: Writes compressed text to your clipboard when you trigger compression.

Privacy impact: None. We only write data you explicitly asked us to compress.

4.4 <all_urls> (Host Permissions)

Why we need it: To allow the extension to work on any webpage where you want to compress text.

What it does: Enables the content script to detect text selection and display results on any website you visit.

Privacy impact: Minimal. The extension only activates when you explicitly select text and choose to compress it via the context menu or popup. We do not read, monitor, or transmit any webpage content.

Note: While this permission appears broad, we only use it to inject our UI elements (result notifications) into pages where you actively use the extension. We do not track your browsing or access page content passively.

5. Third-Party Services

5.1 Gumroad (Payment Processing)

When you purchase the lifetime license ($5 one-time payment), you are redirected to Gumroad, a third-party payment processor.

• What they collect: Payment information (credit card, PayPal, etc.), email address, and purchase details
• Why: To process your payment securely
• Their privacy policy: https://gumroad.com/privacy
• What we receive: Only confirmation that a payment was successful (via license key activation)

5.2 Gumroad License Verification (Optional)

If you choose to activate your license using a license key, the extension may contact Gumroad's API to verify the key is valid.

• Data sent: License key and product identifier
• Purpose: To verify your purchase is legitimate
• Frequency: Only when you manually enter a license key
• Fallback: If verification fails (e.g., offline), the extension accepts the key anyway for offline functionality

Note: This verification is optional and only occurs if you explicitly activate a license key. You can use the free tier without any network requests.

6. How Your Text is Processed

6.1 Local Processing Only

All text compression happens 100% locally in your browser:

1. You select text on a webpage or paste it into the extension popup
2. You choose a compression mode (Fast, Balanced, or Aggressive)
3. The extension processes the text using built-in algorithms running in your browser
4. Compressed text is displayed and copied to your clipboard
5. Optionally, the result is stored locally for quick access in the popup

No network requests are made during compression. Your text never leaves your device.

6.2 No Remote Code Execution

The extension does not download or execute remote code. All compression algorithms are bundled within the extension package that you install from the Chrome Web Store. The code is:

• Reviewed by Google during the Chrome Web Store submission process
• Cryptographically signed and cannot be modified after installation
• Open for inspection via Chrome's developer tools

7. Your Rights and Control

7.1 Data Access and Deletion

Since all data is stored locally on your device, you have full control:

• View stored data: Open Chrome DevTools → Application → Storage → Local Storage
• Delete all data: Right-click the extension icon → "Manage Extension" → "Remove"
• Delete specific data: Use Chrome's "Clear browsing data" feature and select "Hosted app data"
• Reset usage count: Uninstall and reinstall the extension

7.2 Opt-Out

You can stop using the extension at any time by:

• Disabling it in chrome://extensions
• Uninstalling it completely

Upon uninstallation, all local data is automatically deleted by Chrome.

8. Children's Privacy

Toonify Toolkit does not knowingly collect any personal information from anyone, including children under the age of 13. The extension is designed for general use and does not require age verification or personal data collection.

If you are a parent or guardian and believe your child has used this extension, rest assured that no personal data has been collected or transmitted.

9. Security

We take security seriously:

• No servers: With no server infrastructure, there's no central point of attack
• Local processing: Your text never leaves your device during compression
• Minimal permissions: We only request permissions essential for core functionality
• Code review: All code is reviewed by Google's Chrome Web Store security team
• Regular updates: We promptly address any security vulnerabilities discovered

However, please note that no system is 100% secure. While we've designed this extension with security best practices, we cannot guarantee absolute security of data stored locally on your device.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes in our practices
• New features or functionality
• Legal or regulatory requirements

When we make changes:

• We will update the "Last Updated" date at the top of this policy
• Significant changes will be announced via the extension's update notes
• You will be notified if any changes materially affect your privacy rights

We encourage you to review this Privacy Policy periodically.

11. Legal Compliance

11.1 GDPR (EU Users)

For users in the European Union, we comply with the General Data Protection Regulation (GDPR):

• Data minimization: We collect no personal data
• Right to access: All your data is stored locally and accessible to you
• Right to deletion: Uninstall the extension to delete all data
• Right to portability: Export data from Chrome's local storage if needed
• Legal basis: Processing is based on your consent (by using the extension)

11.2 CCPA (California Users)

For users in California, we comply with the California Consumer Privacy Act (CCPA):

• We do not sell personal information (we don't collect any to sell)
• We do not share personal information with third parties (except Gumroad for payments)
• You have the right to know what data we collect (none, except local storage)
• You have the right to delete your data (uninstall the extension)

11.3 Chrome Web Store Policy Compliance

This extension complies with Google's Chrome Web Store Developer Program Policies, including:

• Limited use of permissions
• Transparency about data usage
• No deceptive behavior or hidden functionality
• Clear disclosure of single purpose (text compression)