Privacy Policy & Data Protection

1. Information We Collect (And What We Never Collect)

We practice strict data minimization. We only collect the minimum data necessary to deliver your software license, process payments, and provide customer support:

• Account & Licensing Information: When you purchase a Pro subscription or sign in to the Customer Portal, we collect your email address, billing country, and a cryptographic hardware/device identifier (a one-way hash used solely to enforce the 5-device seat limit).
• Payment Processing (Stripe & PayPal): All credit card, Apple Pay, Google Pay, and PayPal transactions are processed directly by Stripe, Inc. or PayPal under PCI-DSS Level 1 encryption. SWEEPR never sees or stores your raw credit card number or CVV.
• What Your Browser Extension Never Sends Us: SWEEPR Deepblock never transmits the URLs you visit, webpage content, search engine queries, cookies, passwords, or private browsing data to our servers.

2. How We Use Your Information

We use your account and licensing information exclusively to:

• Deliver your 6-digit activation code, extension license key, and signed Ed25519 license token.
• Send transactional billing receipts, renewal notices, and support replies.
• Verify active subscription status and manage your up to 5 licensed devices or browsers.
• Measure aggregate website traffic via Google Analytics on sweeprdeepblock.com (only on our marketing website, never inside your browser extension).

3. Browser Extension Permissions & Chrome Web Store Limited Use

Every permission requested in our browser extension manifest (manifest.json) is strictly scoped to a single user-facing privacy, adblocking, or performance feature:

• declarativeNetRequest & declarativeNetRequestWithHostAccess: Used to block ad networks, third-party trackers, crypto-mining scripts, and URL tracking parameters (utm_*, fbclid, gclid) at the browser network layer without reading page content.
• storage: Stores your site allowlist, blocked-tracker counters, and license key locally on your device.
• tabs & system.memory: Used by the Total Tab & RAM Tamer module to display your live browser memory gauge and automatically hibernate idle background tabs while skipping active audio, video, or unsaved forms.
• host_permissions (<all_urls>): Required so local content scripts can automatically click "Reject All" on cookie pop-ups, hide AI spam search results, and warn you about fake scam online shops.

Chrome Web Store Limited Use Disclosure: The use of information received from Google APIs and Chrome Extension APIs adheres strictly to the Chrome Web Store User Data Policy, including the Limited Use requirements. We never transfer, sell, or use extension data for personalized advertising or creditworthiness lending.

4. Data Retention & Security

All communication between the SWEEPR Deepblock license verifier and our licensing API is encrypted via TLS 1.3, and license tokens are cryptographically signed using Ed25519 keys. Billing records are retained only as long as your subscription is active or as required by UK/EU tax and accounting regulations.

5. Your Rights Under GDPR, UK DPA 2018 & CCPA

Depending on your location, you have the right to:

• Access & Portability: Request a copy of the account and billing records associated with your email address.
• Correction & Erasure ("Right to be Forgotten"): Request deletion of your account data and de-registration of your device hashes.
• No Sale of Personal Information: SWEEPR Global Limited never sells, rents, or trades personal information to third parties or data brokers.

To exercise any of your privacy rights, please submit a request via our Support Center or email [email protected].