Privacy Policy
Guangzhou Jianyun Information Technology Co., Ltd. ("we", "us") operates the CrispGuard Chrome extension (also known as CrispGuard) and this website. We are the data controller responsible for the personal data described below. This policy explains what data we handle, why, how long we keep it, and the choices and rights you have.
1. Data processed in your browser
Keyword and image matching, area covers, blur, the translucent veil and camera-sentry detection all run inside your browser. We do not receive your browsing history, the pages you visit, the text you choose to cover, the images on a page, or camera frames. Extension settings and licence state are stored in Chrome's local storage on your own device and are not transmitted to us.
If you switch on the camera sentry, frames from your camera are analysed in memory to decide whether someone has come up behind you, and are then discarded. They are never recorded, stored or uploaded.
2. Licence data we store
To deliver and maintain the licence you purchased, we store your order email address, your licence key, your plan, the subscription status reported by our payment provider, and a limited device identifier. That identifier is a random value generated by the extension, together with the browser name, the operating system and the time of the last check-in. We use it only to enforce your plan's device limit and to let you remove devices yourself. It is not used to track you across websites and is not linked to your browsing activity.
3. Verification codes
When you use the Manage licence page, we email you a one-time 6-digit code. We store only a salted hash of that code together with its expiry, never the code itself. Delivery is handled by Resend, our email delivery provider, which processes the recipient address on our behalf.
4. Payments
Payments are processed by Dodo Payments, our merchant of record and payment provider. Your card details are entered on the provider's secure checkout and never reach our servers. The provider shares your billing details, transaction status and the email address used at checkout with us so that we can issue and maintain your licence. The provider handles your payment data under its own privacy policy as an independent controller.
5. What we do not collect
- Browsing history or page content
- Page content, keywords, images or browsing history
- Camera frames or recordings
- Card numbers or any full payment credential
- Precise location or device contacts
6. Why we process your data, and our legal bases
Where the EU or UK GDPR applies, we rely on the following legal bases:
- Performance of a contract — to issue, activate, verify and maintain your licence, and to enforce your plan's device limit.
- Legitimate interests — to prevent fraud and licence abuse, to keep the Service secure, and to respond to support requests.
- Legal obligation — to keep records where tax or accounting law requires it, and to handle chargebacks and disputes.
- Consent — where we ask for it for a specific purpose; you can withdraw it at any time.
7. Sharing and service providers
We do not sell your personal data. We share it only with service providers that help us run the Service, and only as far as needed:
- Dodo Payments — payment processing and merchant-of-record services.
- Resend — delivery of verification and transactional emails.
- Google Analytics — aggregate website usage statistics, and only after you accept analytics cookies.
- Cloud hosting providers — running our website, API and database.
We may also disclose data where the law requires it, or to protect our rights or the safety of others.
8. International transfers
Our service providers may process your data in countries other than your own, including outside the EEA and the UK. Where that happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, or another lawful transfer mechanism.
9. Cookies, analytics and local storage
We use the minimum the site needs to work: strictly necessary cookies and browser local storage for things such as your language choice, your device-management session and the cookie choice you make. These are not used to track you and do not require your consent.
With your consent, we also use Google Analytics 4 to understand, in aggregate, how the site is used — which pages and languages visitors reach, which parts of a page they engage with, where the purchase flow is abandoned, and whether pages load quickly and without errors. This helps us improve our search visibility, features, conversion and user experience. Google Analytics is loaded, and sets its cookies, only after you accept: if you decline, no analytics script is loaded and no data is sent to Google. We configure it with advertising and personalisation storage disabled, so it is not used for advertising and does not track you across other websites. You can change or withdraw your choice at any time using the Cookie settings link in the footer, or by clearing your browser storage.
10. Retention and deletion
Licence and device records are kept while your licence is active and for a reasonable period afterwards, so that we can handle refunds, disputes, chargebacks and support requests and meet our legal obligations. After that we delete or anonymise them. You can ask us to delete your data at any time by writing to support@crispextension.com. Deleting a record does not affect any refund obligations, but it does prevent us from re-issuing a licence to you.
11. Your rights
Depending on where you live, you may have the right to access, correct, export or erase your personal data, to restrict or object to processing, and to withdraw consent. If you are in the EU or UK, you also have the right to lodge a complaint with your local supervisory authority. If you are a California resident, you have the right to know, delete and correct your personal information, and we do not sell or share it as those terms are defined by the CCPA. To exercise any of these rights, write to us; we will respond within 30 days and will not charge you or treat you differently for making a request.
12. Security
Licence signatures use asymmetric keys: the private key never leaves our servers, and the extension only contains the public key. Management sessions are short-lived and kept only in the browser tab that created them. We use encryption in transit and restrict access to personal data to those who need it. No system is completely secure, but we work to protect your data and to notify you of any breach that affects you where the law requires it.
13. Children
The Service is a general-purpose utility and is not directed at children under 13 (or the minimum age in your country). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
14. Changes to this policy
If we make a material change to this policy, we will update the date above and, where appropriate, notify you by email or in the extension before the change takes effect.
15. Contact
Questions about this policy, or a request about your data? Write to us at support@crispextension.com.