ai-spend-tracker — Privacy Policy

Last updated: 2026-04-26 · Maintained by Lumen / lazymac (Daniel Choi)

What we collect

Nothing leaves your device, except your Gumroad license key on validation.

License keys you enter on the Settings page are sent only to https://api.gumroad.com/v2/licenses/verify — Gumroad's official endpoint — to confirm you bought the Pro tier. We do not store, log, or relay your key on any server.
Page-scan results (PII counts, BizNo matches, market titles, etc.) are computed locally by a content script and stored in chrome.storage.local on your machine. They are never transmitted.
The extension does not collect personally identifiable information (PII), browsing history, IP address, geolocation, or any analytics.

storage — caches the license validation flag and the rolling 50-entry scan log on your device.
alarms (only on remote-API extensions like MRR Glance) — schedules the periodic background sync to your own configured backend.
activeTab + scripting (only on local-scan extensions) — lets the popup's Refresh button re-run the scan on the tab you are looking at.
host_permissions — lists exactly the URLs the code calls. https://api.gumroad.com/* is always present (license verification). Slug-specific hosts are listed only when the popup or background fetches them directly.

We do not share, sell, or transfer any data to any third party. There are no advertising integrations.

The extension is not directed at children under 13.

Issues, deletion requests, or questions: coindany4@gmail.com (lazymac / Lumen, Republic of Korea).

If we change this policy we will update the date above and ship the new copy with the next extension release.