Privacy Policy
The short version: we read the product on the page you are looking at, not you. We store verdicts by product, not by person. We never sell data, never see your full page address, and never read your browsing history.
- What the extension reads
- What it never reads
- What we keep, and for how long
- If you create an account
- Who else processes data
- Affiliate links
- Your choices and rights
- Children
- Changes and contact
What the extension reads
Product Scanner runs on pages served over HTTPS. On a page it recognises as a product page, it reads the following fields and nothing else. When you ask for a scan, these fields are sent to our API.
| Field | What it is |
|---|---|
| Brand and product name | As named on the page. |
| Price | The listed amount and currency, when the page states both. |
| Composition | The ingredient or specification list, split into items. |
| Category hint | A word for the kind of product, such as "supplement". |
| Identifiers | A barcode or the shop's own product code, when the page shows one. |
| Site host | The site's domain only, such as www.example.com. Never the rest of the address. |
| Coarse client signal | Platform family (one of six), primary language without region, and time-zone offset in whole hours. Used to tell a shared network apart from one person running a script. About 4,600 combinations exist worldwide, so it cannot identify you. |
On a page that is not selling something, the extension sends nothing at all.
What it never reads
- The page address. Only the host is sent. The path, query string and fragment stay in your browser, so the search that led you to a page, share tokens and tracking parameters are never sent.
- The page's HTML beyond the fields above.
- Your browsing history, on any site.
- Other sites' cookies. The extension does not request the permission that would allow this.
- Fingerprinting surfaces. Time-zone name, processor count, device memory, screen size, installed fonts, and canvas or WebGL output are deliberately not read, and a test fails if they ever are.
- Precise location, health, financial or payment information. None of these are collected.
What we keep, and for how long
Verdicts, by product
The result of a scan is cached against the product it describes, so the next person who asks about the same product gets it instantly. That record contains the product's brand, name, category and the analysis. It contains nothing about who asked.
A device identifier
Our API sets one cookie holding a random identifier. It counts your free scans and lets the extension show you what you have scanned before. It identifies a browser, not a person. Clearing the extension's cookies resets it.
Your scan history
For each scan we keep the product's brand, name and verdict, linked to your device identifier and, if you are signed in, to your account. This is what the History screen shows. It is not used for anything else, and a verdict never depends on who is asking.
Usage counts, without identity
We record that a scan happened, its outcome, category, latency and cost. That table has no user id, device id, address or page address, and its timestamps are rounded to the hour.
Your network address, hashed
To limit abuse, your IP address is combined with the coarse client signal and a secret into a one-way hash. Only the hash is stored, and those rows are deleted after 30 days. The address itself is never written to our database.
Link clicks and feedback
When you tap a store link or rate a verdict as helpful or not, we record which product and which store, or which verdict and your answer. A rating is linked to your device identifier so it is counted once; a click is not linked to you at all.
Server logs
Our hosting provider and edge network keep standard request logs, which include IP addresses, for security and debugging. We keep them for no longer than 30 days.
Launch sign-ups
If you leave your email on productscanner.app, we keep the address, where on the page you entered it, and any product names you listed. We use it for one thing: to send you the install link and the verdicts on the products you listed. It is not an account, it is never sold or shared, and one email to support@productscanner.app removes it.
If you create an account
An account is optional. Scanning works without one. If you sign up we store:
- Your email address, used to sign you in, to send verification and password-reset codes, and for nothing else. We do not send marketing email.
- A password, if you choose one, stored only as an argon2id hash and never in a readable form.
- Your Google account identifier and email, if you sign in with Google. We receive only your email address and a stable account id from Google. We do not receive your Google password, contacts or anything else, and we cannot act on your Google account.
- A session token, in a cookie, valid for 30 days and stored as a hash.
Signing in links your scan history across the devices you sign in on.
Who else processes data
We use a small number of providers to run the service. Each receives only what it needs for its job.
| Provider | What they receive | Why |
|---|---|---|
| Google Cloud | Everything above, at rest and in transit, in the United States. | Hosts our server and database. |
| Cloudflare | Request metadata, including IP address. | Edge network, DNS and, when a network is unusually busy, the human check (Turnstile). |
| OpenRouter and the AI model behind it | The product fields listed above: brand, name, price, composition, category and site host. Never your email, device identifier or address. | Researches the product and drafts the analysis. |
| Resend | Your email address, for verification and reset codes only. | Sends transactional email. |
| Only if you choose Sign in with Google. Google's own privacy policy governs what Google sees. | Identity provider. |
We do not sell personal information, do not share it for advertising, and do not use it to determine creditworthiness or for lending.
Affiliate links
As an Amazon Associate we earn from qualifying purchases. Some of the store links shown beside alternatives earn us a commission. Every such link says so in words in the panel. We build those links ourselves from the product's name and never rewrite a shop's own links. Commission never changes what is recommended or the order it appears in. No purchase information comes back to us from any store.
Your choices and rights
- Turn it off anywhere. Remove the extension, or revoke its site access in Chrome's extension settings, and it stops reading pages immediately.
- Reset your device identifier by clearing cookies for api.productscanner.app.
- Access, correct or delete your data. Email support@productscanner.app from the address on your account. We will delete your account, your scan history and your ratings within 30 days and confirm when it is done. Cached product verdicts are not personal data and are not deleted, since they describe a product, not you.
- Residents of the EEA, UK, California and similar jurisdictions have the rights those laws provide, including access, deletion, portability and the right to complain to a supervisory authority. Our legal basis for processing is performance of the service you asked for, and our legitimate interest in preventing abuse. We do not sell or share personal information as those terms are defined in California law.
Children
Product Scanner is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us and we will delete it.
Changes and contact
If this policy changes in a way that matters, we will update the effective date at the top and, for account holders, say so by email. The disclosure written from the code itself, with a citation for each claim, is published alongside the extension's source and is the authoritative description of its behaviour.
Questions: support@productscanner.app.