ExtCafe is committed to protecting your privacy. This policy explains what data we collect through our website, Chrome extensions, and services — and exactly how we use it.
Last updated: September 19, 2026ExtCafe ("we," "us," or "our") operates the website extcafe.com and publishes the following Chrome Extensions:
This Privacy Policy applies to all products, services, and websites operated by ExtCafe. By using our extensions or website, you agree to this policy.
| Data Type | What We Collect | Why |
|---|---|---|
| Account Data | Email address, hashed password | To create and manage your ExtCafe account |
| SEO Audit Data | Page URL, title, meta description, heading counts, image alt counts, link counts, score | To generate your SEO audit report via our AI backend |
| Subscription Data | Subscription status, plan type, billing dates (via Polar.sh) | To manage Pro plan access and billing |
| Payment Data | None — all payment processing is handled entirely by Polar.sh | We never see or store your card details |
| Usage Logs | IP address, request timestamps (server logs) | Security, rate limiting, and abuse prevention |
| Analytics | Page views, session data via Google Analytics (extcafe.com website only) | To understand how visitors use our website |
The SEO AI Assistant extension requests the following permissions and uses them only as described:
| Permission | What It Does |
|---|---|
| activeTab | Reads the currently active tab's URL so we know which page to audit. We do not read tabs in the background. |
| scripting | Injects a script into the active page to read its DOM structure (titles, headings, meta tags, link counts). The script does not read form inputs, passwords, or personal data. |
| storage | Stores your authentication JWT token and your local audit history so you stay logged in and can view past analyses without making extra network calls. Nothing is shared with third parties. |
The DealFinder extension reads product page titles and prices on Amazon.in and Flipkart.com to compare them. No browsing history, purchase history, or personal information is stored or transmitted.
We do not sell, rent, or share your personal data with third parties for advertising or marketing purposes.
Your account data is stored in a MySQL database hosted on Hostinger. Our backend API runs on Render.com (US region). All data is transmitted over HTTPS (TLS 1.2+). Passwords are hashed using bcrypt and are never stored in plaintext.
We use the following third-party processors:
chrome.storage.local. You can
clear it at any time by removing the extension or clearing Chrome's site data.Depending on your location, you may have the right to:
To exercise any of these rights, email us at privacy@extcafe.com. We will respond within 30 days.
Our website (extcafe.com) uses Google Analytics cookies for aggregate traffic analysis. These cookies do not identify you personally. You can opt out via your browser settings or the Google Analytics Opt-out Add-on.
Our extensions use chrome.storage.local — this is local browser storage, not a
cookie. It stores your JWT login token and local audit history. It is not accessible to any website.
Our dashboard and login pages use localStorage to persist your
session token. No tracking cookies are set by our own pages.
Our services are not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify registered users by email. Continued use of our services after changes constitutes acceptance of the updated policy.
If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact us: