Subscription Ghost - Privacy Policy

Last updated: March 2026

Subscription Ghost is built to help users track subscriptions, detect trial periods, and receive reminders before charges. We prioritize local processing and data minimization.

1) Data We Process

• Subscription records you create (for example: name, URL, renewal date, notes, category, trial status, optional cancellation link).
• Local reminder metadata (for example: alarm times, alert state, attention badges).
• Optional account/session data only when you choose to sign in (Google OAuth + Supabase sync integration).

2) Email Scanning and Local Processing

If enabled, Subscription Ghost may analyze visible email content in Gmail Web and Outlook Web to detect subscription-related information (such as service name, renewal dates, trial indicators, and cancellation links). This scanning is performed locally in your browser tab.

We do not send the full email body to third-party AI providers or external analysis services for this feature.

3) Permissions and Why They Are Used

• storage: Save subscription data and preferences on your device.
• activeTab: Read current tab URL when you explicitly request it.
• alarms: Schedule local reminders (for example, trial alerts).
• notifications: Show native reminder notifications.
• identity: Optional OAuth sign-in when you choose account sync.
• tabs: Open relevant pages (subscription/cancellation links, support flows).
• webNavigation: Detect page changes needed for email context behavior.
• Host permissions: https://*.supabase.co/*, https://accounts.google.com/*, https://oauth2.googleapis.com/*, https://www.googleapis.com/*, plus supported webmail pages for local scanning behavior.

4) Cloud Sync (Optional)

Sync is optional. If you do not sign in, your data stays local in browser storage. If you sign in, selected subscription data may be synced to your Supabase-backed account to support multi-session usage.

5) Notifications and Alarms

Reminder alarms and trial alerts are scheduled locally using browser APIs. These reminders do not require external servers to trigger on your device.

6) Data Sharing

We do not sell your personal data. We only transmit data required for optional authentication/sync features that you explicitly use.

7) Data Retention and Deletion

Local data remains in your browser until you delete subscriptions, clear extension storage, or uninstall the extension. If you use sync, your remote data retention follows your Supabase project configuration.

8) Security

We apply reasonable technical measures for data handling. However, no storage or transmission method is guaranteed 100% secure.

9) Children

This extension is not intended for children under 13.

10) Policy Changes

We may update this policy as features evolve. Updates will be reflected on this page with a revised “Last updated” date.

11) Contact

For privacy questions, contact the developer using the support contact listed in the extension’s store profile.