Privacy Policy

1. Extension Data (Free Features)

The ND Browser extension runs entirely on your device. Here's what happens with your data:

• Reading mode preferences, tab settings, focus timers, and breathing exercises — stored locally in your browser's extension storage. Never leaves your device.
• Browsing history and page content — we never access, read, or store your browsing history.
• Analytics and tracking — none. Zero telemetry. No usage analytics. No cookies.
• Third-party services — the free extension makes no external network requests.

2. Premium Membership Data

If you create an account for premium features, we store the minimum necessary:

• Email address — used for login and subscription management only.
• Display name — shown in your dashboard. Optional.
• Subscription status — whether your premium plan is active, which tier you're on, and your extension token.
• Account creation date — for record-keeping.

We do not store:

• Payment card details (handled entirely by Paddle)
• Browsing data, tab history, or extension usage patterns
• IP addresses or device fingerprints

3. Authentication & Security

Account authentication is provided by Supabase, an open-source platform:

• Passwords are hashed using bcrypt — we never see or store your plaintext password.
• Sessions use secure, httpOnly tokens with automatic expiration.
• Your authentication data is stored in Supabase's infrastructure with encryption at rest.

4. Payment Processing

All payments are processed by Paddle, our Merchant of Record:

• Paddle handles all payment data, tax calculations, invoicing, and compliance.
• We never see or store your credit card number, billing address, or other payment details.
• Paddle may collect data necessary for payment processing under their own privacy policy.
• You can review Paddle's privacy policy at paddle.com/legal/privacy.

5. Extension Token

When you subscribe to premium:

• A unique token is generated for your account.
• You paste this token into the extension to unlock premium features.
• The token is validated once via a secure API call — then stored locally in your browser.
• We do not use the token to track your browsing or extension usage.

6. Data Sharing

We do not sell, rent, trade, or share your personal data with any third parties for marketing or advertising purposes. Data is shared only with:

• Supabase — for authentication and account storage.
• Paddle — for payment processing (only when you subscribe).

7. Your Rights

You have full control over your data:

• Delete your account — contact us and we'll permanently remove all your data from Supabase.
• Export your data — request a copy of all data we hold about you.
• Uninstall the extension — all local data is automatically removed when you uninstall.
• Cancel your subscription — manage it anytime from your dashboard or contact Paddle directly.

8. Children's Privacy

ND Browser is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Changes to This Policy

We may update this policy from time to time. Significant changes will be announced on this page. Continued use of ND Browser after changes constitutes acceptance of the updated policy.

10. Contact

Questions about this privacy policy? Reach us at:

support@mishalabs.com