Privacy Policy

1Data Collection & Processing

The extension is designed as a local-first utility:

• AliExpress Order, Tracking & Dispute History: The extension parses and captures your AliExpress purchase order records (order IDs, item descriptions, purchase dates, pricing, order status, carrier tracking checkpoints, and dispute/refund details) when you visit your AliExpress orders page, or silently in the background if the Background Sync feature is enabled.
• Local Storage:All captured order records, tracking events, dispute details, and extension configuration options (such as sync schedules, watchdog thresholds, and display settings) are stored strictly inside your browser's local databases (IndexedDB and extension local storage).
• No Server Collection: We do not run any external servers, databases, or analytics engines that collect, track, store, or transmit your personal or financial data. Everything stays on your local machine.

2Third-Party Services & Integrations

The extension interacts with two external services solely on a user-initiated, direct-to-endpoint basis:

• Google Sheets API (OAuth2): If you choose to enable the Google Sheets synchronization feature, the extension will request authentication via Google OAuth2. The extension requests the minimal, non-sensitive https://www.googleapis.com/auth/drive.file scope. This scope limits our access strictly to files created or explicitly opened by this extension. The extension uses this permission solely to create a new spreadsheet and write your order database directly from your browser to your spreadsheet. Your Google account credentials, spreadsheet data, and access tokens are kept locally in your browser context and are never shared with us or any external servers. You can revoke access and sign out completely from the Settings tab at any time.
• Exchange Rates API (open.er-api.com): The extension fetches daily exchange rates from an open currency API to perform offline currency conversion for your dashboard. No personal data or transaction records are sent to this API.

3Google API Services User Data Policy Compliance

The extension's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• No Human Reading: We do not allow humans to read your Google user data.
• No Advertising: We do not use or transfer your Google user data for serving ads, including retargeting, personalized, or interest-based advertising.
• No Transfers:We do not transfer your Google user data to third parties, except as necessary to provide or improve the extension's features, to comply with applicable law, or as part of a merger, acquisition, or sale of assets.
• No Feature Enrichment: We do not use Google user data to build profiles or train machine learning or AI models.

4Data Protection & Security Mechanisms

We implement robust technical and organizational security measures to protect your sensitive data:

• In-Transit Security: All communications between the extension and Google APIs (or the exchange rates endpoint) are encrypted using Transport Layer Security (TLS 1.2 or higher) / HTTPS to prevent data interception or tampering.
• At-Rest & Local Storage Isolation:
  • Your AliExpress order history is stored in the browser's local IndexedDB, which is sandboxed per origin and isolated by the browser's Same-Origin Policy.
  • Google OAuth2 access tokens are stored in the secure Chrome extension local storage (chrome.storage.local), which is private to the extension and cannot be accessed by other websites or extensions.
• No Backend Servers: Since the extension is local-first, we do not operate backend servers or databases. Your sensitive credentials and purchase history are never sent to, stored on, or processed by any servers owned or controlled by us.

5User Controls & Deletion

• You can pause or entirely deactivate the order collector widget at any time by clicking the extension icon in the browser toolbar and toggling the activation switch.
• You can purge the entire local database instantly by opening the dashboard, navigating to the Import & Backup tab, and clicking the Purge Local Storage Database button.
• If you disconnect the Google Sheets integration, the extension offers you the option to permanently delete the generated spreadsheet from your Google Drive.