Privacy Policy

Last updated: December 2024

1. Introduction

Web Rate ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Chrome browser extension and related services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use the Service.

2. Information We Collect

2.1 Personal Information

When you create an account, we collect the following personal information:

  • Email Address: Required for account creation and authentication
  • Full Name: Collected when you use Google OAuth or provide it voluntarily
  • Country: Collected during account creation for analytics and service improvement
  • Profile Image: Optional profile picture that you may upload
  • Timezone: Optional timezone setting for notification scheduling

2.2 Authentication Information

Depending on your chosen authentication method:

  • Google OAuth: We receive your email address, name, and profile information from Google when you authenticate using Google
  • Email OTP: We send one-time passwords to your email address for authentication

2.3 User-Generated Content

We collect and store content you create through the Service:

  • Reviews: Star ratings (1-5), written comments, and review metadata
  • Tags: Tags you assign to reviews (e.g., "Fast", "User-friendly", "Secure")
  • Images: Screenshots and images you upload with your reviews (up to 5 images per review)
  • Comments: Comments you post on reviews
  • Reactions: Helpful/not helpful reactions to reviews

2.4 Website and Browsing Data

We collect information about websites you interact with:

  • Website URLs: Full URLs of websites you visit (if visit tracking is enabled)
  • Domain Information: Root domains and full domains extracted from URLs
  • Website Metadata: Website titles and favicon URLs when available
  • Visit Tracking: Optional tracking of websites you visit (can be disabled in settings)

2.5 Usage and Technical Information

We automatically collect certain technical information:

  • Device Information: Browser type, version, and extension version
  • Usage Data: How you interact with the Service, features used, and timestamps
  • Authentication Tokens: JWT tokens stored in browser storage for session management
  • Error Logs: Technical error information for debugging and service improvement

2.6 Notification Preferences

We store your preferences for:

  • Email notification settings (enabled/disabled)
  • Visit tracking preferences (enabled/disabled)

3. How We Collect Information

3.1 Information You Provide

We collect information that you directly provide when you:

  • Create an account using Google OAuth or email authentication
  • Submit reviews, ratings, comments, or tags
  • Upload images with your reviews
  • Update your profile information
  • Configure notification or tracking preferences
  • Contact us for support

3.2 Automatic Collection

We automatically collect information when you:

  • Use the Chrome extension to browse websites
  • Interact with the extension interface
  • Visit websites while visit tracking is enabled
  • Use features of the Service

3.3 Third-Party Authentication

When you authenticate using Google OAuth, Google provides us with your email address, name, and profile information in accordance with Google's privacy policy and the permissions you grant.

4. How We Use Information

We use the collected information for the following purposes:

4.1 Service Provision

  • Create and manage your account
  • Authenticate your identity
  • Display your reviews, ratings, and profile information
  • Enable you to view and interact with other users' reviews
  • Provide notification services (if enabled)
  • Track your website visits (if enabled)
  • Maintain your bookmarks and timeline

4.2 Communication

  • Send email notifications about reviews, comments, and activity (if enabled)
  • Send one-time passwords for email authentication
  • Respond to your inquiries and support requests
  • Send important service updates and announcements

4.3 Service Improvement

  • Analyze usage patterns to improve the Service
  • Fix bugs and technical issues
  • Develop new features and functionality
  • Conduct research and analytics (in aggregated, anonymized form)

4.4 Safety and Security

  • Detect and prevent fraud, abuse, and illegal activity
  • Moderate content to ensure compliance with our Terms
  • Protect the rights and safety of users
  • Enforce our Terms & Conditions

4.5 Legal Compliance

  • Comply with applicable laws and regulations
  • Respond to legal requests and court orders
  • Protect our rights and property

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

5.1 Third-Party Service Providers

We use third-party services to operate the Service. These providers have access to your information only to perform specific tasks on our behalf:

  • ImageKit: Stores and serves images you upload with reviews. ImageKit may process image metadata and usage data. See ImageKit's Privacy Policy
  • AWS SES (Amazon Simple Email Service): Sends email notifications and OTP codes. AWS processes email addresses and email content. See AWS Privacy Policy
  • Google: Provides OAuth authentication services. Google processes authentication data in accordance with Google's Privacy Policy
  • Supabase: Hosts our PostgreSQL database. Supabase processes and stores all data we collect. See Supabase's Privacy Policy
  • Fly.io: Hosts our backend infrastructure. Fly.io may have access to server logs and infrastructure data. See Fly.io's Privacy Policy

All third-party service providers are contractually obligated to protect your information and use it only for the purposes we specify.

5.2 Public Information

The following information is publicly visible to all users of the Service:

  • Your reviews, ratings, and comments
  • Tags you assign to reviews
  • Images you upload with reviews
  • Your profile name (if provided)
  • Your country (if provided)
  • Your profile image (if uploaded)

Your email address is never publicly displayed.

5.3 Legal Requirements

We may disclose your information if required by law or in response to:

  • Court orders, subpoenas, or legal processes
  • Government requests or investigations
  • Enforcement of our Terms & Conditions
  • Protection of rights, property, or safety

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

6. Data Storage and Security

6.1 Data Storage

Your data is stored on secure servers provided by:

  • Supabase: PostgreSQL database hosting (data may be stored in various regions)
  • ImageKit: Image storage and CDN (global distribution)
  • Fly.io: Backend application hosting

Data may be stored and processed in countries other than your country of residence. We take appropriate measures to ensure your data is protected regardless of location.

6.2 Security Measures

We implement industry-standard security measures to protect your information:

  • Encryption of data in transit (HTTPS/TLS)
  • Secure authentication using JWT tokens
  • Regular security audits and updates
  • Access controls and authentication requirements
  • Secure password hashing (for applicable authentication methods)

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Your Rights and Choices

You have the following rights regarding your personal information:

7.1 Access

You can access your personal information through your account settings in the extension. You can view your profile information, reviews, and activity.

7.2 Correction

You can update or correct your personal information at any time through your account settings, including:

  • Full name
  • Country
  • Profile image
  • Timezone

7.3 Deletion

You can request deletion of your account and associated data by contacting us. Upon deletion:

  • Your account will be permanently deleted
  • Your reviews and comments may be anonymized or removed
  • Your uploaded images will be deleted from ImageKit
  • Some information may be retained as required by law or for legitimate business purposes (e.g., aggregated analytics)

7.4 Data Portability

You can request a copy of your data in a machine-readable format by contacting us.

7.5 Visit Tracking Opt-Out

You can disable visit tracking at any time through your account settings. When disabled:

  • We will stop tracking new website visits
  • Previously tracked visit data may be retained for analytics purposes

7.6 Email Notification Preferences

You can enable or disable email notifications through your account settings. When disabled, you will not receive email notifications, but in-app notifications may still be available.

7.7 Browser Storage

You can clear your browser's local storage to remove authentication tokens. This will log you out of the Service. You can re-authenticate to continue using the Service.

8. Children's Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

If we discover that we have collected information from a child under 13, we will delete that information promptly. Users between 13 and 18 should have parental permission to use the Service.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country.

By using the Service, you consent to the transfer of your information to these countries. We take appropriate measures to ensure your information is protected in accordance with this Privacy Policy, regardless of where it is processed or stored.

10. Data Retention

We retain your information for as long as necessary to:

  • Provide the Service to you
  • Comply with legal obligations
  • Resolve disputes and enforce agreements
  • Maintain aggregated, anonymized data for analytics

When you delete your account, we will delete or anonymize your personal information, except where retention is required by law or for legitimate business purposes.

Public reviews and comments may remain visible after account deletion if they have been incorporated into aggregated data or if retention is necessary for the Service's operation.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to Know: You can request information about the categories and specific pieces of personal information we collect, use, and disclose
  • Right to Delete: You can request deletion of your personal information (subject to certain exceptions)
  • Right to Opt-Out: We do not sell personal information, so there is no opt-out mechanism required
  • Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise these rights, please contact us using the information provided in the Contact section.

12. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

  • Right of Access: Request a copy of your personal data
  • Right to Rectification: Correct inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data ("right to be forgotten")
  • Right to Restrict Processing: Limit how we use your data
  • Right to Data Portability: Receive your data in a portable format
  • Right to Object: Object to processing of your data for certain purposes
  • Right to Withdraw Consent: Withdraw consent for data processing where applicable

To exercise these rights, please contact us. We will respond to your request within one month.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will:

  • Update the "Last updated" date at the top of this page
  • Notify you of material changes via email or through the Service when possible
  • Post a prominent notice on our website for significant changes

Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you should stop using the Service and may delete your account.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will make reasonable efforts to respond to your inquiries in a timely manner, typically within 30 days.