Privacy Policy

Last updated: February 16, 2026

Canvas Cracked ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

Information We Collect

We collect only the minimum information necessary to provide our service:

• Email address — collected during checkout via Stripe to create your account.
• Password — created by you on the success page after purchase. Stored securely using industry-standard hashing (bcrypt). We never store or see your plain-text password.
• Payment information — processed entirely by Stripe. We never see, store, or have access to your credit card number or payment details.

Information We Do NOT Collect

Canvas Cracked does not collect, transmit, or store any of the following:

• Browsing history or web activity
• Website content you visit
• Clicks, keystrokes, or mouse movements
• IP addresses or location data
• Quiz or test content
• Any data from websites you visit

How We Use Your Information

Your email and password are used solely to:

• Authenticate your login in the Chrome extension
• Verify that your subscription is active
• Communicate with you about your account if needed

How the Extension Works

The Canvas Cracked extension runs entirely in your browser. It modifies how websites detect tab visibility using the browser's built-in Page Visibility API. The extension makes the following network requests:

• Login — sends your email and password to our server to authenticate.
• Subscription check — periodically verifies your subscription is active (every 6 hours). Only your authentication token is sent, not any browsing data.

No other network requests are made. The extension does not monitor, log, or transmit any information about your browsing activity.

Data Storage

Your account data (email and hashed password) is stored on our secure server. The extension stores your authentication token locally in Chrome's storage to keep you logged in. This data never leaves your device except during login and subscription verification.

Third-Party Services

We use the following third-party services:

• Stripe — for payment processing. Stripe's privacy policy can be found at stripe.com/privacy.

Data Retention

Your account data is retained as long as you have an active subscription. If you cancel your subscription, your account data may be deleted after 90 days. You can request immediate deletion of your data at any time by emailing us.

Your Rights

You have the right to:

• Request a copy of the data we hold about you
• Request deletion of your account and all associated data
• Change your password at any time via the extension

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date.

Contact Us

If you have questions about this Privacy Policy or your data, email us at getcanvascracked@gmail.com.