Privacy Policy

1. Who We Are

ExtensionDB (extensiondb.store) is a paid directory that lets you search, filter, and analyze extension and plugin metadata across major marketplaces — Chrome, VS Code, WordPress, Firefox, and Shopify. This policy explains what data we collect when you use the service and how we handle it.

2. Data We Collect

Account Data

When you create or sign in to an account, we store the information required to authenticate you and provide dashboard access, including your name and email address. If you sign in with Google or GitHub, profile data comes from the selected provider.

Purchase Data

Payments are processed by LemonSqueezy. When you purchase access, we store:

• The email address used at checkout
• Your order ID and purchase status
• The webhook payload from LemonSqueezy

We retain purchase records for transaction, accounting, fraud-prevention, and access-restoration purposes. We do not process or store credit card numbers, bank details, or other payment instrument data.

Session Data

When you sign in, we create a session that may record a session token, IP address, browser user agent, and expiration timestamp.

Usage Data

We store extension bookmarks you save within the dashboard. Search queries and filter selections are passed as URL parameters and are not intentionally logged or stored as product analytics.

3. Data We Do Not Collect

• We do not use Google Analytics or any third-party analytics service
• We do not use tracking pixels or advertising scripts
• We do not sell, rent, or share your personal data with third parties for marketing

4. How We Use Your Data

• Account & purchase data: To verify your purchase, grant dashboard access, and display your profile within the app
• Session data: To keep you signed in and secure your account
• Bookmarks: To let you save and retrieve your favorite extensions

5. Third-Party Services

We rely on third-party services, each with their own privacy policies:

• Cloudflare R2 - intended storage for downloadable database files
• LemonSqueezy - payment processing
• Google/GitHub - social sign-in when enabled

6. Cookies

We use a session cookie to keep you signed in. This is a functional cookie required for the service to work. We do not use cookies for tracking or advertising.

7. Data Storage & Security

Your data is stored in SQLite databases on our production servers. Download files are served from Cloudflare R2. Data is transmitted over HTTPS in production. We use HMAC-SHA256 verification for payment webhooks.

8. Data Retention

Your account data and bookmarks are retained for as long as your account exists. Sessions expire automatically. Purchase and payment records are retained after account deletion where needed for transaction history, tax/accounting obligations, fraud prevention, and access restoration.

9. Your Rights

You may request to access, correct, or delete the personal data we hold about you, subject to retained payment records described above.

10. Marketplace Data

The metadata displayed on this site is publicly available information published by the respective marketplaces (including the Chrome Web Store, Visual Studio Marketplace, WordPress.org, Firefox Add-ons, and the Shopify App Store). We do not collect private data from the developers or users of those extensions, plugins, or apps.

11. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated "Last updated" date.

12. Contact

If you have questions about this privacy policy, contact us at [email protected].