Privacy Policy

Extension.vn ("Extension.vn," "we," "us," or "our") operates the website at https://extension.vn and related browser extensions (collectively, the "Services").

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use our Services. It is designed to meet common requirements under applicable privacy laws, including the EU General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), and Vietnam's personal data protection regulations.

By using the Services, you acknowledge that you have read this Privacy Policy. If you do not agree, please do not use the Services.

For purposes of applicable data protection law, Extension.vn is the controller of personal information processed through the Services.

Contact: support@extension.vn

We collect information in the following categories:

A. Information you provide

• Account information: When you sign in with Google, we receive your Google account identifier, email address, display name, and profile picture as provided by Google.
• Marketing preferences: If you opt in, we store your email address for product updates and announcements.
• Feedback and support: When you submit feedback through an extension or our website, we may receive your email address, message content, and any fields included in your submission.
• Extension submissions: If you submit an extension listing, we may collect contact details and metadata you provide.

B. Information collected automatically

• Client identity key: We assign a pseudonymous device/browser identifier stored in the evn_client_key cookie on extension.vn. This helps us recognize returning browsers and link extension usage before and after sign-in.
• Extension usage data: When you use a supported extension, we may record the Chrome extension ID, extension name, extension version, timestamps of first and last use, usage counts, and the source of the request (for example, identity key, login, or feedback).
• Website analytics: We use analytics tools that may collect page views, referrer URLs, browser type, device information, and similar usage data. Our analytics provider may use cookies or similar technologies.
• Technical logs: Our servers may log IP addresses, request timestamps, user agents, and error information for security, debugging, and service reliability.

C. Information we do not collect

Our browser extensions are designed to perform their core functions locally in your browser. We do not intentionally collect the content of web pages you visit, passwords, payment card numbers, or browsing history through the Services unless you explicitly submit such information to us (for example, in feedback).

If you are located in the European Economic Area or the United Kingdom, we process personal data only where we have a valid legal basis:

• Contract: To provide the Services you request, such as account sign-in and extension identity linking.
• Legitimate interests: To secure our Services, prevent abuse, understand product usage, improve features, and communicate about the Services—balanced against your rights and expectations.
• Consent: For optional marketing emails and non-essential cookies or analytics where required by law. You may withdraw consent at any time.
• Legal obligation: To comply with applicable laws, lawful requests, and regulatory requirements.

• Provide, operate, and maintain the Services, including sign-in, session management, and extension APIs.
• Associate extension usage with your account or pseudonymous client identity key.
• Send service-related communications and, with consent, marketing emails.
• Respond to feedback, support requests, and abuse reports.
• Monitor performance, troubleshoot errors, and protect against fraud and unauthorized access.
• Analyze aggregated or de-identified usage to improve our products and website.
• Comply with legal obligations and enforce our Terms of Service.

We use cookies and similar technologies for the following purposes:

• Essential cookies: Including evn_client_key to maintain your client identity key and support extension integration.
• Authentication: Session cookies related to Google sign-in and extension access tokens where applicable.
• Analytics: To understand how visitors use extension.vn. Where required, we will request consent before placing non-essential analytics cookies.

You can control cookies through your browser settings. Blocking essential cookies may limit certain features, including extension login and identity linking.

We do not sell your personal information. We may share information with:

• Service providers: Hosting, database, email delivery, analytics, and authentication vendors that process data on our behalf under contractual safeguards.
• Google:When you choose Google Sign-In, Google processes your authentication according to Google's privacy policy.
• Legal and safety: When required by law, court order, or to protect rights, safety, and security of users and the public.
• Business transfers: In connection with a merger, acquisition, or sale of assets, subject to continued protection of your information.

We may share aggregated or de-identified information that cannot reasonably be used to identify you.

We retain personal information only as long as necessary for the purposes described in this policy, unless a longer period is required by law.

• Account data is kept while your account is active and for a reasonable period afterward.
• Client identity keys and guest extension usage may be retained until linked to an account or deleted as part of routine cleanup.
• Marketing email records are kept until you unsubscribe or request deletion.
• Server logs are retained for a limited period for security and troubleshooting.

We implement administrative, technical, and organizational measures designed to protect personal information, including encrypted connections (HTTPS), access controls, and secure credential handling. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on your location, you may have the following rights regarding your personal information:

• Access a copy of the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete personal information, subject to legal exceptions.
• Restrict or object to certain processing activities.
• Data portability, where applicable.
• Withdraw consent at any time for processing based on consent.
• Opt out of marketing communications via unsubscribe links or by contacting us.

California residents (CCPA/CPRA)

California residents have the right to know what personal information we collect, use, and disclose; to request deletion; to correct inaccurate information; and to opt out of the "sale" or "sharing" of personal information. We do not sell personal information. To exercise your rights, email support@extension.vn. We will not discriminate against you for exercising privacy rights.

EEA/UK residents

You may lodge a complaint with your local supervisory authority. We encourage you to contact us first so we can address your concern.

To submit a privacy request, contact support@extension.vn. We may need to verify your identity before fulfilling certain requests.

We may process and store information in countries other than your own. Where required, we use appropriate safeguards for cross-border transfers, such as Standard Contractual Clauses or equivalent mechanisms recognized under applicable law.

The Services are not directed to children under 16 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will take steps to delete it.

The Services may link to third-party websites, Chrome Web Store listings, or services we do not control. Their privacy practices are governed by their own policies. We are not responsible for third-party content or data handling.

Our extensions may communicate with extension.vn APIs to obtain identity keys, complete sign-in, submit optional marketing emails, or send feedback. Each extension's Chrome Web Store listing and permission disclosures describe local processing performed in your browser. Extension-specific privacy practices supplement, and do not replace, this policy.

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date. Material changes may be communicated through the website or by email where appropriate. Continued use after changes become effective constitutes acknowledgment of the updated policy.

For privacy questions or requests, contact us at support@extension.vn.