Dieses Dokument ist auf Englisch und vereinfachtem Chinesisch verfügbar. Unten steht die englische Fassung.
This policy explains what information HushMask collects, why, and what control you have. In short: the extension does not collect the content of the pages you visit, and the website does not use cookies.
This policy is published by HushMask (“we”, “us”). Contact: privacy@hushmask.com.
1. The browser extension
What stays on your device
Your masks, regions, settings and the sites you turned HushMask on for are stored in your browser’s local extension storage. They are not sent to us or to anyone else. Masking runs entirely inside your browser. HushMask does not read, copy, upload or analyse page content, screenshots, recordings or browsing history, and it does not use AI or any remote processing.
Site access
HushMask asks for access to a site only when you click “Enable on this site”. It uses that access to apply your masks on that site and nothing else. You can remove access at any time from HushMask or from your browser’s extension settings.
License check (Pro only)
If you activate a Pro license, the extension sends the following to our licensing server (https://api.hushmask.com) when you activate, about once a day while online, and when you deactivate:
- your license key;
- a random installation ID created by the extension (not a hardware or device fingerprint);
- a short name for the installation, such as “Chrome on macOS”, so you can recognise it later.
Our server also sees your IP address as part of the connection. We use it only for rate limiting and abuse prevention and store at most the country it maps to, alongside activation events. No page addresses, page content or masks are ever sent.
Chrome Web Store Limited Use
HushMask’s use of information received from browser APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. We do not sell user data, use it for advertising, or transfer it except as described in this policy.
2. Purchases
Payments are processed by Stripe. Your card or other payment details are entered on Stripe’s checkout page and are never sent to us. Stripe shares with us the email address you entered, your country, the amount, currency and payment status, and transaction identifiers. We use these to issue and deliver your license key, to answer support requests, to handle refunds and disputes, and to keep the records the law requires. Stripe’s own use of your data is governed by the Stripe Privacy Policy.
We store: purchase email, Stripe checkout and payment IDs, amount, currency, purchase date, license status, an encrypted copy of your license key and a hash used to look it up, and the installations activated with it.
3. Emails
We send transactional emails only: your license key, links you request from the Manage license page, and replies to your messages. They are delivered by our email provider, Resend. We do not send marketing email.
4. This website
The website does not set cookies and does not use advertising or cross-site tracking. If you choose a language, the choice is remembered in your browser’s local storage only. The site is hosted on Cloudflare, which processes connection data such as IP addresses to deliver the site and protect it from attacks. We may view aggregated, cookie-free traffic statistics.
5. Service providers
| Provider | Purpose |
|---|---|
| Stripe | Payment processing, tax calculation, fraud prevention |
| Cloudflare | Website hosting, licensing API and database, security |
| Resend | Sending license and account emails |
These providers may process data in the United States and other countries. Where required, transfers are covered by appropriate safeguards such as Standard Contractual Clauses.
6. Legal bases (EEA / UK)
We process purchase and license data to perform our contract with you, to meet legal obligations (for example tax and accounting records), and for our legitimate interest in preventing fraud and license abuse.
7. Retention
Purchase and license records are kept for as long as your license exists and afterwards for as long as tax and accounting law requires (generally up to 10 years). One-time links expire after 30 minutes. Security logs are kept for up to 12 months. You may ask us to delete your data at any time; we will delete what we are not legally required to keep, which ends your Pro license.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your data, to object to or restrict processing, and to complain to a data protection authority. Email privacy@hushmask.com from your purchase address and we will respond within 30 days. We do not sell or share personal information as defined by the CCPA.
9. Children
HushMask is not directed at children under 16, and we do not knowingly collect their data.
10. Changes
If we change this policy we will update the date above, and for significant changes we will notify customers by email. If the extension ever needs new kinds of data, we will ask first.