Privacy Policy
Last updated: February 6, 2025
At ASINCrate, we believe privacy is a fundamental right. This Privacy Policy explains how we collect, use, and protect your information when you use our Chrome extension and website.
TL;DR: We process images and videos 100% locally in your browser. We don’t track your browsing. We only collect what’s absolutely necessary to provide the service.
1. Information We Collect
1.1 Account Information (Optional)
If you choose to create an account, we collect:
- Email address
- Password (stored securely hashed, never in plain text)
- Account creation date
Creating an account is optional. You can use basic features (single image downloads, previews) without any account.
1.2 Subscription Information
If you subscribe to Pro, our payment processor (Stripe) collects:
- Payment card details (stored by Stripe, not by us)
- Billing address
- Transaction history
We never see or store your full credit card number. Stripe handles all payment processing under their own privacy policy.
1.3 Usage Data
We collect minimal, anonymized usage metrics:
- ASIN unlock counts (to enforce quota limits)
- Feature usage statistics (aggregate, not individual)
- Error logs for debugging (no personal data included)
1.4 What We Do NOT Collect
- Your browsing history
- The specific products you view on Amazon
- The images or videos you download
- Your Amazon account information
- Any data from non-Amazon websites
2. How We Use Your Information
We use collected information to:
- Provide and maintain the ASINCrate service
- Process payments and manage subscriptions
- Send important service updates (no marketing unless you opt in)
- Enforce usage quotas for Free tier accounts
- Improve our product based on aggregate usage patterns
3. Local Processing
This is important: All image and video processing happens 100% locally in your browser. When you download images or videos:
- Files are fetched directly from Amazon to your browser
- ZIP packaging happens in your browser using JavaScript
- Nothing is uploaded to our servers
- We cannot see what you download
This architecture is intentional. We designed ASINCrate to be privacy-first from day one.
4. Chrome Extension Permissions
ASINCrate requests only the minimum permissions necessary:
- Host permissions (amazon.* domains): To detect product pages and extract image/video URLs
- Storage: To save your preferences and authentication state locally
- Downloads: To save files to your computer
We do NOT request <all_urls>, browsing history, or any permissions beyond what’s strictly needed.
5. Data Sharing
We do not sell, trade, or rent your personal information. We may share data only in these cases:
- Payment processing: Stripe processes payments under their privacy policy
- Legal requirements: If required by law or valid legal process
- Business transfer: In connection with a merger or acquisition (with notice)
6. Data Security
We implement industry-standard security measures:
- All data transmitted over HTTPS/TLS encryption
- Passwords hashed using bcrypt with salt
- Database access restricted and monitored
- Regular security audits and updates
7. Data Retention
- Account data: Retained while your account is active, deleted within 30 days of account deletion
- Payment records: Retained as required by tax law (typically 7 years)
- Usage logs: Anonymized and aggregated after 90 days
8. Your Rights
You have the right to:
- Access: Request a copy of your personal data
- Correction: Update inaccurate information
- Deletion: Delete your account and associated data
- Export: Receive your data in a portable format
- Opt-out: Unsubscribe from marketing communications
To exercise these rights, contact us at [email protected].
9. Children’s Privacy
ASINCrate is not intended for users under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.
10. International Users
ASINCrate is operated from the United States. If you access our service from outside the US, your information may be transferred to and processed in the US. By using ASINCrate, you consent to this transfer.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on our website. Your continued use after changes constitutes acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy, please contact:
- Email: [email protected]
- Website: asincrate.com
Privacy by Design
ASINCrate is built with privacy as a core principle, not an afterthought. Local processing, minimal permissions, and transparent practices are fundamental to how we operate.