Privacy Policy
Controller: [legal entity name: to be added], [postal address: to be added]. Contact: support@getsitereplies.com. Effective date: [date of publication].
Summary
Your templates stay on your device. SiteReplies does not read your messages, run analytics, show ads or sell data. If you subscribe and use cloud backup, your templates are encrypted in your browser with a passphrase only you know before upload; we cannot read them and cannot recover a lost passphrase.
What the extension does on your device
- Templates, libraries, website patterns, settings are stored in Chrome's extension storage on your device. They leave it only if you press Export (a file you save) or Back up now (encrypted).
- The address (hostname) of the active tab is read only after you open the extension, to select the matching library. It is not stored or sent.
- The text field you click into: the chosen template is written there. SiteReplies does not read page content other than the focused field's value and cursor position needed to insert at the right place, and sends nothing anywhere.
Chrome permissions: storage, activeTab, scripting. No host permissions, no content scripts, no remote code.
Data we hold when you subscribe
| Data | Why | Where | Retention |
|---|---|---|---|
| Random install ID and a SHA-256 hash of a random device secret | Identify your browser to the licence and backup service; the secret itself is never stored by us | Cloudflare Workers KV | While subscribed plus [period to be confirmed]; registrations that never subscribe are deleted after 60 days |
| Stripe customer and subscription IDs, plan, status, period dates, last payment, refund or failure time | Decide whether paid features are on | Cloudflare Workers KV | As above |
| Encrypted backup (up to 3 revisions, max 1 MB) with size and time | Cloud backup | Cloudflare Workers KV | Until you delete it, or 30 days after the subscription ends |
| IP address and request metadata | Security, abuse prevention, operation | Cloudflare logs | [retention to be confirmed against the Cloudflare configuration] |
Payments: are processed by Stripe. Stripe collects your name, email, billing address, payment details and tax details under its own privacy policy. We do not receive your card number. We receive identifiers and subscription status. We are the seller; Stripe is the payment processor and is not our merchant of record.
This website
getsitereplies.com is a static site hosted on Cloudflare. It sets no cookies, runs no analytics and loads no third-party scripts, fonts or embeds. Cloudflare, as hosting and network provider, processes request data such as IP addresses to deliver and protect the site. If we add analytics later, this policy will be updated first.
Legal bases (GDPR)
[to be confirmed by counsel]: contract (providing the subscription and backup), legitimate interests (security, fraud prevention), legal obligation (tax and accounting records).
Processors and transfers
Cloudflare, Inc. (hosting, Workers KV, logs) and Stripe (payments). Transfers outside the EEA: [safeguards to be described after reviewing the Cloudflare and Stripe data processing terms].
Your rights
Access, rectification, deletion, restriction, portability and objection, and the right to complain to a supervisory authority ([authority]). To delete local data, remove libraries or uninstall the extension. To delete cloud data, use "Delete cloud backups" in Settings or contact support. See Delete your data.
Security
HTTPS in transit; storage encrypted at rest by our hosting provider; client-side AES-256-GCM (PBKDF2, 600,000 iterations) for backup contents, which means we hold ciphertext. Metadata is visible to us. No system is perfectly secure and no independent audit has been performed.
Children and changes
SiteReplies is not directed to children under [age to be confirmed]. We will post changes here with a new effective date.