Privacy Policy

HackPSU Fall 26 project, not legal advice. Last updated October 24, 2026.

In short

Pro sends the public policy text to our server; summaries are cached per policy; stored policy change events carry no user id or IP address; we don't keep a record of which sites you visit.

Data that stays in your browser

Your receipts, the sites they came from, rule based summaries, change alerts, finance flags, and suggested actions are stored locally by the extension. They are not sent to us. You can export them from the extension.

What your account stores

Your name and email address.
A scrypt hash of your password, if you sign up with email and password. We never store the password itself.
If you choose Continue with Google, the verified email and name Google shares through Auth0, used to sign you in to the same account. We don't get your Google password.
Your plan (Free or Pro), your subscription status, and your renewal date.
Your Stripe customer ID, only if you started a checkout while Pro was paid.
If you connect the extension, a sign in token stored in the extension. Our server keeps only a hash of that token.
A session cookie that keeps you signed in.

Pro summaries

When you ask for a Pro summary, the extension sends the public text of that policy to our server, which asks Gemini for a cited summary. Summaries are cached by policy so the same policy isn't summarized twice. We don't keep a record of which sites you visit.

Listen to this receipt

When you press Listen, the extension sends that receipt's site name, its risk level, the points we show you with the policy sentences they came from, and the suggested next steps (not the page itself) to our server. Our server asks Google Gemini to turn them into a short spoken summary and sends that summary to ElevenLabs to read aloud. The audio is cached per receipt, without any account information, so the same receipt isn't sent twice. We don't keep a record of which sites you listened to.

Terms change tracker

If you are signed in, when the extension notices that a policy changed, it reports a change event to our server: the policy address without query strings, a hash of the policy text, the risk level before and after, and the time. The report is sent with your sign in so we can block spam, but the stored event carries no user id, account, or IP address. Events are stored in Tiger Data (Timescale) and power the public What changed this week page.

Hosting

The website runs behind Cloudflare, which processes requests to deliver it and sees IP addresses like any content delivery network. Our app does not keep request logs.

The home page has a demo video hosted on YouTube. Nothing loads from YouTube until you press play. When you do, YouTube (Google) receives the request like any embedded video, under its own privacy policy.

Service providers

We use these services only for the features above: Google Gemini (summaries), ElevenLabs (Listen), Tiger Data (anonymous change events), Auth0 (Continue with Google), Stripe (payments), and Cloudflare (hosting). Each feature is off unless we have set it up, and none of them receives your receipts.

Payments

Pro is free right now, so we take no payments and ask for no card. If that changes, Stripe will process payments and we will never see or store your card number.

Cookies

The website uses one session cookie to keep you signed in. We don't use advertising or tracking cookies.

Deleting your data

Remove the extension to delete everything stored in your browser. To delete your account, contact the project team through the repository.