Privacy policy

The autoFresh extension refreshes pages entirely on your device. It does not send browsing data, schedules, page text, URLs, or identifiers to us or any third party, and it has no analytics, advertising, or tracking. Two scoped exceptions, both under your control: if you link a paid subscription, the extension periodically checks your licence using an anonymous device token (no browsing data); and if you configure a webhook notification, the matched keyword — plus, only if you enable it, a redacted page URL — is sent to the destination you chose (Discord, Telegram, or your own endpoint), never to us.

Schedules stay in Chrome storage on your device. Small preferences sync through your Chrome profile. Keyword monitoring stores only the matching keyword; element clicking stores only the selector you chose — never page values, passwords, or form data.

Accounts and billing

Creating an account (needed only for Pro) is optional. If you do, we store: your name and email, a salted hash of your password (never the password itself), sign-in session records (which include the IP address and browser identifier of the session), your subscription status, the device link between your account and the extension, any webhook destinations you save (encrypted at rest), and — if you enable two-factor authentication — an encrypted authenticator secret. Payments are processed by Stripe; we never receive your card details.

Where your data is stored

The application and its database run on servers in Norway (Sandefjord), and encrypted database backups are stored in the EU (Amsterdam). Everything we hold about your account therefore stays within the EEA and under the GDPR.

Three processors operate internationally, and only for the specific job they do: Stripe (payments — we never see your card details), Resend (the password-reset and signup emails, sent from the EU), and Discord (our private support channel, which receives contact-form tickets). Cloudflare provides DNS and TLS at the network edge. Remember that the extension itself sends us nothing about your browsing at all — so none of this touches the pages you refresh.

Support messages

If you use the contact form, we store your name, email, subject, and message so we can reply and so your ticket reference stays valid; the same details are forwarded to our private support channel on Discord. We use them only to answer you, and you can ask us to delete a ticket at any time.

Emails

We send account emails only: a signup confirmation link and password-reset messages, delivered via Resend. No newsletters, no marketing, no third-party sharing.

Cookies

Signing in sets a session cookie, and two-factor sign-in may set short-lived cookies that remember the step you are on. Choosing light or dark mode stores that preference in a cookie so the page does not flash on the next visit. All of these are strictly functional: there are no analytics or advertising cookies.

Your choices

You can unlink the extension, cancel your subscription from the customer portal, and request deletion of your account data at any time by emailing [email protected]. We use account data only to provide and support the subscription, and we do not sell it.