🔐 SessionMaster Privacy Policy

1. Introduction

SessionMaster ("the Extension") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our Chrome extension.

TL;DR: We don't collect, store, or transmit any of your personal data. Everything stays on your device, completely private.

2. What Data We Collect

✓ Data We DO NOT Collect:

• Passwords or Credentials - We never store, see, or access your passwords
• Personal Information - No names, emails, addresses, or identification data
• Authentication Details - No login credentials or security questions
• Web Browsing History - We don't track which sites you visit
• User Activity Logs - No tracking of clicks, movements, or interactions
• Financial Information - No payment data, credit cards, or transactions
• Location Data - We don't collect GPS or location information
• Health Information - No health or medical data collection

✓ Data We DO Store (Locally Only):

When you choose to save a session, the extension stores:

• Cookies - HTTP cookies used by the website for your session
• LocalStorage - Website storage data you explicitly save
• SessionStorage - Temporary session data from the website
• Session Name - A custom name you give to the session
• Domain Name - Which website the session belongs to
• Timestamps - When the session was created and last used

3. How We Use Your Data

The extension uses stored session data exclusively for:

• Restoring your saved sessions when you switch between them
• Displaying session information in the extension popup
• Comparing sessions side-by-side (comparison feature)
• Providing smart suggestions based on time and usage patterns
• Exporting/importing sessions at your request
• Protecting sessions with an optional master password

4. Data Storage & Security

Where Your Data Is Stored:

• ✅ Exclusively on your device (local browser storage)
• ✅ NOT on our servers
• ✅ NOT in the cloud
• ✅ NOT transmitted over the internet

Security Measures:

• Local Storage Only - Data never leaves your device
• Optional Password Protection - Set a master password to lock sessions
• AES-256 Encryption - Sessions can be encrypted with a master password
• No Remote Access - We have no ability to access your data
• Browser API Protection - Uses Chrome's secure storage APIs

5. Data Sharing & Third Parties

We do NOT share your data with anyone.

• ✅ No third-party analytics
• ✅ No data brokers
• ✅ No advertisers
• ✅ No service providers with data access
• ✅ No government data sharing (except as legally required)

The extension is self-contained and doesn't communicate with any external servers, APIs, or services (except when you explicitly use Export/Import features to download your data).

6. Permissions Explanation

The extension requests the following permissions, each with a specific purpose:

7. Your Rights & Controls

You have complete control over your data:

• View Your Data - See exactly what's stored in the extension
• Export Your Data - Download all sessions as JSON files
• Delete Your Data - Remove individual sessions or all data
• Import Your Data - Restore from backup files anytime
• Uninstall Anytime - All data is removed when you uninstall

8. Data Retention

• Sessions - Stored indefinitely until you delete them
• Master Password - Only used for encryption, never stored
• Usage Logs - Last used timestamps are stored with sessions
• Upon Uninstall - All extension data is automatically removed

9. Children's Privacy

SessionMaster is not intended for use by children under 13. We do not knowingly collect data from children. If you believe a child has used the extension, please contact us to request data deletion.

10. Changes to This Policy

We may update this Privacy Policy occasionally. Any changes will be reflected in this document with an updated "Last Modified" date. Continued use of the extension after updates means you accept the new policy.

11. Contact Us

If you have questions about this Privacy Policy or our privacy practices:

• 📧 Email: [your-email@example.com]
• 🐙 GitHub: [link-to-github-repo]
• 🌐 Website: [your-website.com]

12. Legal Compliance

GDPR Compliance (EU Users)

• ✅ No personal data collection or processing
• ✅ No data transfers outside EU
• ✅ You have full control over your data
• ✅ Right to access, delete, and export your data

CCPA Compliance (California Users)

• ✅ No personal information is sold
• ✅ No personal information is shared
• ✅ You can delete your data anytime
• ✅ You can export your data anytime

Privacy Shield & Standard Contractual Clauses

Not applicable - all data is stored locally on your device with no international transfers.

13. Summary of Privacy Commitments