The short version: we never sell your data, we never read your browsing history, and we only send page details to our AI partners when you actively scan a product page. The long version is below.
Last updated: May 15, 2026 · Version 2.0
FindPrices ("we", "our", or "us") operates the FindPrices Chrome extension and the findprices.com website. This Privacy Policy explains what data we collect, why we collect it, who we share it with, and the rights you have over it.
When you actively invoke FindPrices on a product page, we read that page's visible content — the DOM, extracted Markdown text, and a screenshot — so the extension can identify the product and search for it at other retailers.
We do not read pages you do not actively scan, beyond a lightweight local detector that recognises whether a product page is open. That detector runs entirely on your device and does not transmit any page content.
If you sign in with Google, we receive your email address and your Google profile identifier via the OAuth scopes userinfo.email and userinfo.profile. We use this to identify your account, sync saved deals across devices, and enforce the free-tier daily quota.
To run, monitor, and improve the price-comparison service, we store the following in our Firebase backend, associated with your account ID (or the placeholder anonymous if you are signed out):
These telemetry collections carry your account ID where you are signed in. They are pseudonymised, not anonymised — the ID could be used to re-associate the data with your account.
The following is stored on your device via chrome.storage.local and is never sent to us:
consentVersion, consentAcceptedAt).chrome.storage.local is browser-managed local storage. It is not encrypted at rest by Chrome — treat it as device-local data. We do not store secrets there.
If you sign in with Google, we use the data we receive (email + profile ID) only for:
The sub-processors below process data on our behalf under contractual obligations that align with this policy. We do not sell or rent personal data, and we do not share your general browsing history.
findprices_sid cookie value at install time so we can attribute the install to the marketing channel that referred you. Not used for ongoing tracking inside the browser. Privacy policy →findprices_rdt_cid cookie value at install time for marketing attribution of Reddit referrals. Not used for ongoing tracking. Privacy policy →FindPrices is a free service supported by referral partnerships.
When you first install the extension, the welcome page that opens performs a one-time attribution handoff. It loads a small page on findprices.com which reads its own first-party cookies and posts them back via the browser's postMessage API. The values forwarded are:
findprices_sid — Trillion attribution session ID.findprices_rdt_cid — Reddit conversion attribution ID.findprices_utm — UTM source / medium / campaign attribution.findprices_ref_code — Referral code linking your install to the FindPrices user who shared the extension with you. Stored locally on your device for 30 days.The extension does not request the cookies Chrome permission. It cannot read cookies on any other website, and it cannot read findprices.com cookies outside of this one-time install handoff. The values are forwarded once to first-party FindPrices Cloud Functions, which relay the attribution signals to Trillion and Reddit. They are not used for ongoing advertising tracking inside the browser.
Our website may use Firebase / Google Analytics cookies to understand how visitors use findprices.com. These collect anonymised data about page visits and interactions.
_ga, _ga_*.localStorage (not a cookie) to remember your cookie-banner choice for 6 months.localStorage for this site to be asked again.We do not use third-party advertising cookies on the website.
We retain data only as long as we need it. Retention is enforced by Firestore TTL policies on a per-collection expiresAt field that the extension stamps on every write.
| Data category | Retention |
|---|---|
| Account information (email, profile ID) | Until you delete your account. |
| Saved deals and preferences | Until you delete them or your account. |
| Submissions, selector_failures, pdp_learning, analytics_events | 90 days. |
| Errors | 30 days. |
| Feedback (in-extension and contact form) | 1 year. |
| Server logs | 30 days. |
| Anonymised aggregate website analytics | Up to 2 years. |
At any time you may:
You have the rights under the GDPR including access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with your supervisory authority.
You have the rights under the CCPA / CPRA including the right to know, delete, correct, and opt out of sale or share. We do not sell or share personal information for cross-context behavioural advertising. We honour the Global Privacy Control signal. We do not discriminate against consumers who exercise these rights.
FindPrices's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements:
identity API; we do not see or store the raw token.FindPrices is not directed to children under the age of 13, or under the age of 16 in the EEA and the UK. We do not knowingly collect data from minors. If you believe a minor has provided us with data, please contact us and we will delete it.
Our sub-processors may process data outside of your country, including in the United States. Where required by law we rely on the EU Standard Contractual Clauses or an equivalent safeguard.
If we become aware of a personal data breach affecting you, we will notify you and the relevant supervisory authority within 72 hours where required by applicable law.
We will post material changes to this page, update the "Last updated" date, and — for significant changes — notify signed-in users by email or in-extension banner before the change takes effect.
When we materially change what data is sent to sub-processors or for what purpose, we will also bump the in-extension consent version, which re-prompts you to accept the updated disclosure before your next scan.