Plain-language summary: We do not collect your name, email, or browsing history. Your portfolio data stays on your device. We only store what is strictly necessary to verify your license and prevent Trial abuse. We never sell your data.
Chrome Web Store Limited Use Compliance: The use of information received from Chrome browser APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. User data is used solely to provide the extension's core functionality as described in this policy.
This Privacy Policy applies to all Crypto Price Alert products: the Chrome Extension, the Progressive Web App (PWA) available at crypto-price-alert-pwa.vercel.app, and the associated backend service hosted at crypto-alert-backend-snowy.vercel.app.
The data controller is the individual developer reachable at cpa.extension.app@gmail.com.
By installing and using the Extension or PWA, you acknowledge this Privacy Policy.
LOCAL ONLY The following data is stored in Chrome's local storage on your device. It is never transmitted to our servers unless you explicitly use the AI Assistant feature.
CPA-XXXX-XXXX-XXXX-XXXX)The following data is stored on our backend infrastructure (Vercel hosting, JSONbin storage):
| Data Type | Purpose | Retention Period |
|---|---|---|
| License key + plan + expiry date | Verify Premium activation status | Until license expires |
| Transaction hash (TX hash) | Verify blockchain payment; prevent duplicate license | Until license expires |
| Blockchain wallet address | Linked to payment transaction (publicly available on blockchain) | Until license expires |
| Device fingerprint hash (SHA-256) | Prevent multiple free Trial activations on same device | 90 days or until Trial reset |
| AI daily usage counter | Enforce daily question limits per subscription plan | 24 hours (auto-deleted) |
| AI session data (portfolio snapshot) | Provide portfolio context to AI Assistant | 1 hour (auto-deleted) |
| Pending AI alerts | Transfer AI-generated price alerts to your extension | Until retrieved (max 1 hour) |
NEVER COLLECTED
The Extension requests the following Chrome permissions. Each is used only for the stated purpose:
| Permission | Why We Need It |
|---|---|
storage |
Store your portfolio, alerts, and preferences locally on your device |
notifications |
Send price alert notifications when your configured thresholds are reached |
alarms |
Schedule periodic price checks (every 1 minute for Premium, every 5 minutes for Free) |
tabs |
Open the payment page and AI Assistant in a new browser tab when you click the relevant buttons |
Host: api.coingecko.com |
Fetch current cryptocurrency prices |
Host: crypto-alert-backend-snowy.vercel.app |
Verify licenses, process Trial activation, access AI Assistant |
| Host: blockchain RPC nodes | Verify on-chain payment transactions |
The PWA stores your watchlist, portfolio holdings, price alerts, and license key locally in your browser's localStorage. This data remains on your device and is not synced or shared. Installing the PWA on your home screen does not grant us any additional access to your device.
When you click "Enable Notifications" in the PWA and grant permission, your browser generates a unique push subscription containing an endpoint URL and encryption keys. This subscription is stored on our servers linked to your license key.
🔔 NOTE Push notifications are used exclusively to deliver price alerts you have configured. We never send marketing messages or unsolicited notifications.
Your control: You can revoke notification permission at any time in your browser or device settings. This will immediately prevent further notifications from being delivered to your device.
The AI Assistant is a Premium feature powered by Anthropic's Claude API. When you use the AI Assistant:
Important: We do not permanently store your portfolio data or AI conversation history on our servers. However, when using the AI Assistant, your portfolio data (token names and quantities) is transmitted to Anthropic. Please review Anthropic's Privacy Policy to understand how they process data.
AI usage is limited per subscription plan (10/20/30 questions per day). A daily counter is maintained on our server to enforce this limit and is automatically deleted after 24 hours.
All Premium subscription payments use on-chain cryptocurrency transactions (USDC or USDT on Base, BSC, or Polygon networks). This means:
SECURITY WARNING We will never ask for your private key, seed phrase, or wallet password — through any channel. Requests for these are scams. Report them to cpa.extension.app@gmail.com.
To ensure each device can only use the free 5-day Trial once, we collect a device fingerprint when you activate the Trial. This consists of:
Prominent Disclosure: This fingerprint data is collected for the sole purpose of preventing Trial abuse. It is irreversibly hashed using SHA-256 before storage — we cannot reconstruct the original values. This data is retained for 90 days or until you request a Trial reset, and is used for no other purpose.
This fingerprint does not identify you personally and cannot be linked to your identity without additional information we do not possess.
| Service | Data Shared | Purpose | Privacy Policy |
|---|---|---|---|
| Anthropic (Claude API) | Portfolio data, AI questions (temporary) | AI Assistant responses | anthropic.com/privacy |
| CoinGecko API | Coin identifiers (e.g. "bitcoin") | Fetch cryptocurrency prices | coingecko.com/privacy |
| Vercel | Standard server logs (IP, timestamp) | Backend hosting infrastructure | vercel.com/privacy |
| JSONbin | License data, fingerprint hashes | Data storage for licenses and Trial tracking | jsonbin.io/privacy-policy |
| Blockchain RPC nodes (public) | Transaction hash | Verify on-chain payment | Public blockchain infrastructure |
We do not sell, rent, or share your data with advertisers, data brokers, or any other parties not listed above.
If you are located in the EU or EEA, you have the following rights regarding your personal data:
The legal basis for processing is: contract performance (license verification), legitimate interests (Trial abuse prevention), and consent (AI Assistant portfolio data).
California residents have the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. We do not sell personal information.
Contact us at cpa.extension.app@gmail.com with the subject line "Privacy Request." We will respond within 30 days.
You can also delete locally stored data at any time by uninstalling the Extension or clearing Chrome's local storage for the extension via chrome://settings/siteData.
Despite our security measures, no internet transmission is 100% secure. We encourage you to use strong security practices on your end (e.g., keeping your browser up to date).
The Extension is not directed at or intended for use by children under the age of 13 (or 16 in the EU). We do not knowingly collect personal data from children. If you believe a child has used the Extension and provided personal data, please contact us and we will delete it promptly.
We may update this Privacy Policy periodically. The "Last updated" date at the top indicates when changes were last made. Significant changes will be noted in the extension's update changelog. Continued use of the Extension after changes constitutes acceptance of the revised policy.
For privacy questions, data deletion requests, or to exercise your rights:
📧 cpa.extension.app@gmail.com
We respond within 30 days. Please include "Privacy Request" in the subject line.