Privacy Policy
Last updated: August 11, 2026
1. Information We DO NOT Collect
EasyCatch is built with a local-first architecture. Because all processing happens inside your browser, we do not collect or store the content you capture.
- We do not collect or store webpage text, Markdown files, images, or videos that you clip.
- We do not run remote database servers to track your captured content.
- No backend servers process your captured content. Pro license verification uses a minimal authentication server only to validate your License Key.
2. Local Usage Tracking (Free Tier)
To enforce the 5 captures/day limit on the Free plan, we store a counter in your browser's local storage (chrome.storage.local).
- The counter is stored entirely on your device.
- It resets automatically every day at midnight.
- It is never transmitted to us or to any third party.
3. Pro Tier Activation & Verification
When you activate EasyCatch Pro, the extension communicates with our licensing server solely to verify the validity and activation count of your License Key. This verification does not transmit any captured web content, browsing history, or personal data.
4. Third-Party Payment Processors
Subscription payments are processed by our secure Merchant of Record partners, including Paddle, Waffo, and Creem. They collect billing information (such as email and payment details) under their own privacy policies.
- We do not store or have access to your full credit card details.
- All payment processing is handled by the respective payment partner.
5. Data Classification & Storage Matrix
The table below categorizes every type of data EasyCatch interacts with, where it is stored, who can access it, and how long it is retained. This classification applies to both Free and Pro tiers.
| Data Category | Storage Location | Access Scope | Retention |
|---|---|---|---|
| Captured web content (Markdown, JSON) | chrome.storage.local (AES-GCM encrypted) | User only; never transmitted to EasyCatch | Until user clears extension data or uninstalls |
| Daily capture counter | chrome.storage.local (plain) | User's browser only; resets daily at midnight | 24 hours max; overwritten each day |
| License Key & activation status | chrome.storage.local (AES-GCM encrypted) | Extension reads key; verification server checks validity only | Until license expires or user removes key |
| API tokens (Lark, webhook URLs, Obsidian) | chrome.storage.local (AES-GCM encrypted) | User only; used locally to sign API calls from the browser | Until user removes or overwrites configuration |
| Billing & payment data | Paddle / Waffo / Creem (Merchant of Record) | Payment processor only; EasyCatch never sees full card details | Per processor's GDPR-compliant retention policy |
| Website analytics (page views) | Google Analytics 4 (GDPR-compliant, anonymized IP) | Aggregated metrics only; no PII linked to captures | 26 months (GA4 default) |
| Support email correspondence | Email provider (encrypted at rest) | Support team only; used solely to resolve the reported issue | 24 months after ticket closure |
6. Your Data Rights (GDPR, CCPA, and Beyond)
Because EasyCatch does not operate a backend that stores your content, most data rights are exercised directly by you through the extension and your browser. However, we fully support the following rights under GDPR, CCPA, and similar privacy regulations:
- Right to Access: All captured content and configuration data are stored locally in
chrome.storage.local. You can inspect this data at any time through Chrome DevTools or the extension's settings panel. - Right to Delete: You can delete all locally stored data by clearing the extension's storage through Chrome's extension management page, or by uninstalling the extension. For license verification records, email [email protected] and we will confirm deletion within 48 hours.
- Right to Portability: Captured content can be exported as Markdown, JSON, or CSV at any time. Your data is never locked into a proprietary format.
- Right to Object: You may object to the use of Google Analytics on our marketing website by declining cookies in the consent banner, or by using your browser's Do Not Track setting.
- Right to be Informed: This Privacy Policy serves as our primary transparency document. We will notify active users of material changes via the extension's update notes and by updating the "Last updated" date on this page.
7. Browser Permissions in Detail
Chrome displays permission warnings when you install EasyCatch. Here is exactly what each permission does and does not do:
- activeTab: Allows the extension to read the DOM of the currently active tab only when you click the extension icon. It does not grant background access to all tabs.
- sidePanel: Required to open the EasyCatch sidebar interface. The side panel is a Chrome UI surface, not a content script.
- scripting: Used to inject content scripts that extract structured data (text, images, SKU tables) from the page you choose to capture. Scripts run only on pages where you explicitly invoke the extension.
- storage: Used to save your configuration, API tokens, and capture data locally. All sensitive values are encrypted with AES-GCM before being written to storage.
- host_permissions (1688.com, shopify.com): Requested only when you capture a page on these domains. Enables the extension to read product data and CDN prefixes for export. No data is collected from these domains in the background.
8. Contact Us
For privacy-related questions, data deletion requests, or to exercise any of the rights described above, please contact us at [email protected]. We respond to all privacy inquiries within 48 hours.