Privacy Policy

1. Introduction

Easy Local Storage Manager ("we", "our", or "the Service") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our browser extension and web application.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Name
• Password (hashed using bcrypt and securely stored)

2.2 Storage Data (Extension Only)

The browser extension accesses and manages browser storage on your local device only. This includes:

• localStorage data
• sessionStorage data
• Cookies

Important: Storage data is only processed locally in your browser. We do NOT collect, transmit, or store your browser storage data on our servers unless you explicitly use the sync feature.

2.3 Sync Data (Optional Feature)

Zero-Knowledge Architecture: If you enable cross-device sync, your storage data is fully encrypted end-to-end before leaving your device. We implement a zero-knowledge architecture where your data is encrypted using your own encryption keys, and our system has absolutely no ability to read or decrypt your synced data.

This is an optional feature you must explicitly enable. Your data never leaves your device unencrypted, and only you control the encryption keys. We store only the encrypted data on our servers, which we cannot access or read under any circumstances.

When you sync data, we also store device identification information (device ID and device name) to help you manage synced data across multiple devices. This information is stored alongside your encrypted sync data and cannot be used to access your encrypted content.

2.3.1 User Profiles (Optional Feature)

The Service allows you to create named profiles that save snapshots of your storage data for a specific domain. Profiles can be stored encrypted (using the same zero-knowledge encryption as sync) or unencrypted, depending on your choice. When stored encrypted, we cannot read or access the profile data. When stored unencrypted, the data is stored as-is on our servers for quick access. Profile metadata (item counts, sizes) is stored unencrypted for display purposes only.

2.4 Login Notifications

When you log in to your account, we collect and send you an email notification containing:

• Login timestamp
• IP address
• User agent (browser/device information)

This information is used solely for security purposes to help you identify unauthorized access to your account. IP addresses and user agents are not stored in our database beyond the email notification.

2.5 Browser Fingerprinting and Session Management

Purpose: To enforce subscription plan limits and prevent account sharing, we collect and store browser fingerprint information when you log into the extension. This helps us identify unique browser installations and enforce the maximum number of browsers allowed under your subscription plan.

What We Collect:

• Browser ID: A unique identifier generated and stored locally in your browser to identify this specific browser installation
• Browser Information: Browser name, version, platform (e.g., "Firefox 145.0 on Linux")
• Operating System: OS name and version
• Browser Fingerprint: A hash generated from:
  • User agent string
  • Timezone
  • Language preference
  • Screen resolution
• Last Active Timestamp: When you last used the extension from this browser

How We Use This Data:

• Enforce browser limits based on your subscription plan (e.g., Free plan allows 1 browser, Pro plan allows 3 browsers)
• Display your linked browsers in your account dashboard for management
• Detect and prevent unauthorized account sharing or abuse
• Allow you to remove old or unused browser sessions

Your Control: You can view all linked browsers in your account dashboard and remove any browser at any time. Removing a browser requires password confirmation for security. The browser fingerprint data is automatically deleted when you remove a browser or delete your account.

Privacy Note: While we collect browser fingerprint data, we do NOT use it for tracking, advertising, or any purpose beyond subscription enforcement. The fingerprint is stored as a simple hash and cannot be used to identify you personally or track your browsing activity.

2.6 Usage Analytics & Tracking

No Tracking Policy: We do NOT collect, store, or transmit any usage analytics, feature usage statistics, extension interaction events, crash reports, error logs, or any form of telemetry data. The extension operates entirely locally in your browser and does not communicate with our servers except for optional sync functionality (which is end-to-end encrypted).

We have no ability to monitor how you use the extension, what features you access, or any other behavioral data. Your privacy is completely respected with zero tracking or data collection beyond what is necessary for core functionality.

2.7 Payment Information

Payment processing is handled by Dodo Payments. We do not store your credit card information on our servers. We only receive transaction confirmation and subscription status from Dodo Payments.

2.8 Support Tickets

When you contact support, we store:

• Your messages and support requests
• Screenshots you voluntarily upload
• Ticket metadata (status, priority, category)

3. How We Use Your Information

We use collected information for:

• Providing and maintaining the Service
• Processing your subscription and payments
• Enabling cross-device sync (if opted in)
• Responding to support requests
• Sending important account notifications
• Preventing fraud and abuse

4. Data Storage and Security

End-to-End Encryption: We implement industry-standard security measures combined with zero-knowledge encryption architecture to protect your data:

• Client-side encryption: All sync data is encrypted on your device before transmission
• User-controlled keys: Only you have access to your encryption keys - we cannot decrypt your data
• Zero-knowledge storage: We store only encrypted data that we cannot read or access
• Account security: All passwords are hashed using bcrypt with secure salt (never stored in plain text)
• Transmission security: All data transmission uses HTTPS/TLS encryption
• Access control: Access to user data is restricted to authorized personnel only
• Regular audits: Regular security audits and system updates

5. Data Sharing and Third Parties

We do NOT sell your personal information. We only share data with:

• Dodo Payments: For payment processing (required for subscriptions)
• Cloud Hosting Provider: For server infrastructure (data is encrypted)
• Legal Authorities: If required by law or to protect our rights

6. Your Rights and Choices

You have the right to:

• Access: View your account data at any time
• Export: Download your stored data
• Delete: Request account deletion (removes all associated data)
• Opt-out: Disable sync features
• Correct: Update your account information

To exercise these rights, contact us at easy-local-storage-manager@nhrdev.com

7. Data Retention

Minimal Data Retention: We retain only the minimum data necessary for service operation:

• Account data: Until you delete your account
• Encrypted sync data: Until you disable sync or delete your account (we cannot read this data)
• Support tickets: For 2 years after resolution
• Payment records: As required by law (typically 7 years)
• Usage data: We do not collect or retain any usage analytics or behavioral data

Since we use zero-knowledge encryption, we cannot access or read your encrypted sync data even while it's stored on our servers. This data is retained only to enable your cross-device synchronization.

8. Browser Extension Permissions

Local-Only Operation: Our extension operates entirely within your browser and never transmits your data to external servers except for optional sync functionality (which is end-to-end encrypted). The extension requires these permissions:

• Storage: To read and modify localStorage, sessionStorage, and cookies on your device only
• Active Tab: To access storage for the current website you're viewing
• All URLs: To manage storage across all websites you visit

These permissions are necessary for core functionality. The extension only accesses storage when you actively use it and never collects, tracks, or reports any usage data to external services.

9. Children's Privacy

Our Service is not intended for users under 13 years of age. We do not knowingly collect information from children under 13. If you believe we have collected such information, please contact us immediately.

10. International Users

Our servers are located in Singapore. By using the Service, you consent to the transfer of your information to our servers. We comply with applicable data protection laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the new policy on this page
• Updating the "Last Updated" date
• Sending an email notification for major changes

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: easy-local-storage-manager@nhrdev.com
• Support: Use the in-app support ticket system