Privacy Policy

Validors (“we,” “us”) is operated by Merse Sárvári as a sole proprietor. This policy explains what data Validors collects when you use the service at this domain, and what we do with it.

What we collect

• Account data. When you sign in with Google or GitHub, we receive your name, email address, and profile picture from that provider via Supabase Auth. We don't offer or store passwords ourselves.
• Audit data. The Chrome Web Store URLs you submit, the resulting audit reports, and your report history are stored against your account so you can revisit them.
• Tracked-extension data. If you opt in to tracking an extension, we store that extension's ID and re-run an audit on it weekly to build your score/install history. This only happens for extensions you explicitly choose to track, and you can stop at any time.
• Payment data. Subscriptions and token purchases are processed by Stripe. Validors never sees or stores your card number - Stripe shares back only what we need to manage your subscription (plan, status, renewal date) and to grant tokens.
• Session cookies. Supabase Auth sets a cookie to keep you signed in. We don't currently run any third-party analytics or advertising trackers on Validors.

What we scrape from the Chrome Web Store

To audit a listing, Validors reads the same public data any visitor to that listing page can see -- title, description, screenshots, category, ratings, and similar. Chrome's own listing data feed also happens to include the developer account's private registrant contact info (email, address, phone). Validors deliberately never reads or stores that field, for any listing, including your own.

Who we share data with

• Stripe - payment processing and subscription billing.
• Supabase - our database, authentication, and hosting provider.
• Google Gemini API - the public listing content (text and screenshots) of an extension you ask us to audit is sent to Gemini to generate the analysis. Your own account or payment details are never included in that request.

We don't sell your data, and we don't share it with anyone else.

Data retention and deletion

We keep your account and report history until you ask us to delete it. Email merse.sarvari@gmail.com to request deletion of your account and associated data, or to ask any question about what we hold.

Children

Validors is not directed at, and is not knowingly used by, children under 16.

Changes to this policy

If this policy changes materially, we'll update the date at the top of this page. Continued use of Validors after a change means you accept the updated policy.

Contact

Questions about this policy: merse.sarvari@gmail.com.