Privacy policy
Effective
1. Overview
Web Monitor is a Chrome extension and website that watch web pages for you and alert you when something you care about changes. This policy explains what data the product handles, why, and the choices you have.
2. Data we collect
We store only what the product needs to work:
- Account: your email address, name if you give one, and a password stored only as a secure hash. We email you a one-time code to confirm your address before the account can be used. If you continue with Google, we receive your name, email address and profile picture from Google; the access tokens Google issues are stored encrypted and not used afterwards.
- Monitors: the pages you watch (their addresses), what to read on them, your conditions, schedules and notification settings.
- Readings: the values read from the elements you chose (for example a price), and a limited history of recent checks and changes.
- Screenshots: only for monitors where you turn them on, an image of the watched page as your browser showed it when an alert fired. They are stored in Cloudflare R2, never in our database.
- Devices: a random ID, the name and platform of each browser you connect.
- Notification destinations: the email address, chat webhooks or push topics you configure.
- Keys: your OpenAI API key, if you add one, stored encrypted; API keys you create for integrations, stored only as a hash.
- Assistant: the messages you send to the in-app assistant and its answers.
- Feedback: the star rating you give in the dashboard and the store it pointed you to.
- Uninstall feedback: if you answer the optional survey that opens when you remove the extension, the reason you pick, any comment you write and the extension version. It is anonymous: it is not linked to your account, device or IP address.
3. What stays in your browser
Checks run in your own Chrome. Pages are opened and read by the extension on your device, and only the values of the elements you chose are sent to our backend. Your browser's cookies and sessions never leave your browser. Cookie values you type into a monitor's cookie rules are stored with that monitor.
If you turn on screenshots for a monitor, the extension captures the page in its reading tab on every full-browser check and keeps the image in memory only. It is uploaded only when the check triggers an alert; otherwise it is discarded. A screenshot shows whatever the page showed, including anything visible while you are signed in to that site.
The extension asks for access to a site only when you create a monitor for it, and you can revoke that access in Chrome at any time.
4. AI features
When an AI condition is enabled, a compact version of the chosen element's HTML is sent to OpenAI using your own API key. The in-app assistant sends your messages and the details of your own monitors to OpenAI to answer you; it never receives other users' data or your secrets.
5. Optional usage analytics
Usage analytics are off by default. If you opt in from the extension, it sends anonymous events linked to a random installation ID, with technical context (browser, operating system, language and extension version) to Moderok. They never include your email, name, the pages you visit or their content. You can opt out at any time and sending stops immediately. The events are:
- Extension installed or updated, and a daily active ping
- Side panel opened (page view)
- Theme changed, with the theme name
6. How we use data
We use your data only to run the product: to check your pages, send your alerts, sync your monitors between devices, and answer the assistant. We do not sell your data, use it for advertising, or share it except with the services below that run the product for us.
7. Service providers
These services process data on our behalf:
- Convex: hosts the database and backend that store your account and monitors.
- Vercel: hosts this website.
- Google: lets you sign in with your Google account, if you choose to.
- Resend: sends alert and verification emails.
- Cloudflare R2: stores screenshots of monitored pages, only for monitors where you turn them on.
- OpenAI: answers the in-app assistant, and evaluates AI conditions with the key you provide.
- Moderok: receives anonymous usage events, only if you opt in from the extension.
8. Retention and deletion
Screenshots are deleted after 30 days, or sooner with their change, their monitor or your account. While one exists, alert emails and webhooks that include it carry a private, unguessable link to it: anyone with that link (including the chat or push service that shows the image) can see it until it is deleted.
Each monitor keeps its latest checks and changes; older ones are deleted automatically. When your account is deleted, your monitors, history, devices, keys and settings are deleted with it. To delete your account, or to get a copy of your data, write to us from the email of your account. You can also export your monitors from the dashboard at any time.
9. Security and changes
Data travels over encrypted connections. Secrets such as your OpenAI key are encrypted at rest, and integration API keys are stored as hashes.
Web Monitor is not directed to children under 13 and does not knowingly collect their data.
If this policy changes in a meaningful way, we will update the date above and let you know in the product.
Contact
Questions or requests: support@extension.lat