Privacy Policy

1. Overview

The xPortal Crypto Tracker Chrome Extension ("Extension", "we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains our practices regarding the collection, use, and disclosure of information when you use our Extension.

Key Privacy Commitment: We do not collect, store, or transmit any personal data. All Extension settings and preferences are stored locally on your device.

2. Data Collection

2.1 Personal Information

We DO NOT collect any personal information, including but not limited to:

• Names or usernames
• Email addresses
• IP addresses
• Device identifiers
• Location data
• Browser history
• Cookies or tracking pixels
• Any form of personally identifiable information (PII)

2.2 Usage Data

We DO NOT collect any usage data, including:

• Click events or user interactions
• Feature usage statistics
• Error reports or crash logs
• Performance metrics
• Session duration or frequency

2.3 Financial Information

We DO NOT collect any financial information, including:

• Cryptocurrency wallet addresses
• Private keys or seed phrases
• Transaction history
• Portfolio values
• Trading activity

3. How We Use Information

Since we do not collect any personal data, we cannot and do not:

• Sell or rent your information to third parties
• Use your data for marketing purposes
• Create user profiles
• Track your behavior across websites
• Share data with advertisers
• Perform analytics on user behavior

3.1 Local Settings Storage

The Extension stores the following settings locally on your device using Chrome's storage API:

• Alert Preferences: Your chosen price alert thresholds (1-20%)
• Notification Settings: Whether alerts are enabled for specific cryptocurrencies
• Display Preferences: Your selected data source (WebSocket or API)
• Sound Settings: Whether sound notifications are enabled

Important: These settings never leave your device and are not accessible to us or any third party.

4. Data Storage

4.1 Local Storage Only

All Extension data is stored exclusively on your local device using Chrome's built-in storage mechanisms:

• chrome.storage.local: Used for storing user preferences and settings
• No cloud storage: We do not use any cloud services to store user data
• No external databases: We do not maintain any user databases
• No server-side storage: We do not operate servers that store user information

4.2 Data Persistence

Your settings remain on your device until you:

• Uninstall the Extension
• Clear Chrome's Extension data
• Reset the Extension settings

5. Third-Party Services

5.1 CoinGecko API

The Extension fetches cryptocurrency price data from CoinGecko's public API:

• Data fetched: Current prices, 24-hour changes, market cap rankings
• No authentication: We use public endpoints that don't require user identification
• No data sent: We only receive data; we don't send any user information
• CoinGecko Privacy: Please review CoinGecko's Privacy Policy

5.2 Binance WebSocket

For real-time price updates, the Extension may connect to Binance's public WebSocket streams:

• Public data only: Receives publicly available price ticker information
• No authentication: No API keys or user credentials required
• Read-only connection: We only receive broadcast data

6. Extension Permissions

The Extension requests the following Chrome permissions, each used solely for the stated purpose:

6.1 Storage Permission

• Purpose: Save your settings and preferences locally
• Data stored: Alert thresholds, enabled coins, notification preferences
• Access: Only the Extension can access this data

6.2 Alarms Permission

• Purpose: Schedule periodic price data updates
• Function: Triggers price fetches every 30-60 seconds
• No tracking: Does not track user activity or behavior

6.3 Notifications Permission

• Purpose: Display price alert notifications when thresholds are met
• Control: Can be disabled in Extension settings
• Content: Shows only price information, no personal data

6.4 Host Permissions

• Domains: https://api.coingecko.com/*
• Purpose: Fetch cryptocurrency price data
• Scope: Limited to CoinGecko API endpoints only

7. Data Security

We implement security measures to protect the Extension's functionality:

• No data transmission: Since we don't collect data, there's no risk of data breaches
• Secure connections: All API calls use HTTPS encryption
• No authentication: No passwords or credentials to compromise
• Content Security Policy: Strict CSP prevents code injection
• Regular updates: We update the Extension to address security concerns
• Open source: Code transparency allows security auditing

8. User Rights and Control

You have complete control over the Extension and its data:

8.1 Your Rights

• Access: View all your settings directly in the Extension
• Modification: Change any setting at any time
• Deletion: Remove all data by uninstalling the Extension
• Portability: Your settings are stored in standard Chrome storage format

8.2 How to Exercise Your Rights

• View settings: Click the Extension icon → Settings
• Reset settings: Use the "Reset to Defaults" option in settings
• Delete all data: Uninstall the Extension from Chrome
• Disable features: Toggle individual features in settings

9. Children's Privacy

The Extension is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. Since we don't collect any personal information from any users, this protection extends to all age groups.

Parental Control: Parents can control Extension installation through Chrome's family safety features and supervised user accounts.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Updating the "Last Updated" date at the top of this Privacy Policy
• Posting a notice in the Extension update notes
• For significant changes, displaying a notification in the Extension

Your continued use of the Extension after changes constitutes acceptance of the updated Privacy Policy.

11. Legal Compliance

11.1 GDPR Compliance (European Users)

For users in the European Economic Area (EEA):

• Legal basis: Not applicable as we don't process personal data
• Data protection: No personal data to protect
• Cross-border transfers: No data leaves your device
• DPO contact: Not required as no data processing occurs

11.2 CCPA Compliance (California Users)

For users in California:

• Personal information: We don't collect any personal information as defined by CCPA
• Sale of data: We don't sell any user data (we don't have any to sell)
• Right to deletion: Uninstall the Extension to remove all local data
• Non-discrimination: All users receive identical functionality

11.3 Chrome Web Store Compliance

This Extension complies with:

• Chrome Web Store Developer Program Policies
• Chrome Extension Single Purpose Policy
• Chrome Extension User Data Privacy requirements
• Manifest V3 security requirements

12. Contact Information