Privacy Policy

This Privacy Policy describes how ShinkiroSoft ("we", "us", or "our"), operated by Alejandro Jiménez Gómez (Madrid, Spain), collects, uses, and shares information when you use our browser extensions and related services (collectively, the "Services").

By using our Services, you agree to the practices described in this policy. If you do not agree, please do not use our Services.

1. Information We Collect

1.1 Account Information

When you create an account to use a ShinkiroSoft extension, we collect your email address and a password. Passwords are never stored in plain text — they are hashed and managed exclusively by Supabase, our authentication provider. We do not have access to your raw password at any point.

1.2 Payment Information

If you purchase a paid plan, payment is processed by Lemon Squeezy, our payment processor. We do not collect or store any credit card numbers, bank details, or billing information on our servers. Lemon Squeezy may collect your name, email address, billing address, and payment method details in order to process the transaction and send you purchase receipts and license keys.

1.3 Extension Usage Data

Our browser extensions do not collect browsing history, track visited URLs, read page content beyond what is needed for their core functionality, or transmit any personally identifiable information to our servers during normal operation. The extensions communicate with our Supabase backend solely to verify your license/session status.

2. How We Use Your Information

• To create and manage your account (authentication via Supabase).
• To verify your license and grant access to paid features.
• To send transactional emails: email address confirmation, password reset links, and purchase receipts.
• To respond to support requests you send to us.
• To comply with legal obligations.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. Third-Party Services

We rely on the following third-party processors. Each is bound by its own privacy policy and, where applicable, GDPR data processing agreements:

Supabase (Authentication & Database)

Supabase stores your email address, hashed password, and session tokens required for login and password-reset flows. Supabase infrastructure is hosted on AWS (EU region where available).
Supabase Privacy Policy →

Lemon Squeezy (Payments & License Management)

Lemon Squeezy acts as the Merchant of Record for all purchases. They handle payment processing, invoicing, tax compliance, and sending order confirmation emails. Your payment data is governed entirely by their privacy policy.
Lemon Squeezy Privacy Policy →

Vercel (Website Hosting)

This website is hosted on Vercel. Vercel may collect standard server access logs (IP address, browser type, referring URLs) for security and performance purposes.
Vercel Privacy Policy →

4. Data Retention

We retain your account information (email address) for as long as your account is active. If you request account deletion, we will delete your data from our Supabase database within 30 days, except where retention is required by law (e.g., tax records held by Lemon Squeezy).

5. Your Privacy Rights

Regardless of where you are located, you may contact us at any time to:

• Access — request a copy of the personal data we hold about you.
• Correct — request correction of inaccurate or incomplete data.
• Delete — request deletion of your account and associated personal data.
• Withdraw consent — stop using our Services at any time; we will not retain your data beyond what is legally required.

To exercise any of these rights, contact us at the email address in Section 9. We will respond within 30 days.

EU / EEA Residents (GDPR)

If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR), including the right to restriction of processing, data portability, and the right to object to processing. You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD) or the supervisory authority in your country of residence.

California Residents (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the right to know what personal information is collected, the right to delete it, and the right to opt out of its sale. We do not sell personal information. To exercise your CCPA rights, contact us at the email address in Section 9.

UK Residents (UK GDPR)

If you are located in the United Kingdom, the UK GDPR applies and grants you rights equivalent to those listed under the EU GDPR section above. You may lodge a complaint with the Information Commissioner's Office (ICO).

6. Cookies

This website does not use tracking or advertising cookies. Supabase may set a session cookie strictly necessary for authentication flows (e.g., password reset). No third-party analytics or advertising cookies are present.

7. Children's Privacy

Our Services are not directed to children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Continued use of our Services after changes constitutes acceptance of the updated policy.

9. Contact

For any privacy-related questions, requests, or complaints, please contact us at:

ShinkiroSoft — Alejandro Jiménez Gómez
Madrid, Spain
📧 shinkirosoft@gmail.com