Privacy Policy

Last updated: August 7, 2026 · Applies to extension version 1.7.3

This Privacy Policy explains how PreppHint (operating as Nixologic) ("we", "us") handles information in connection with the Save Image As Type browser extension (the "Extension") and this website (the "Site"). We are privacy-first by design.

1. The short version

• Your images never leave your device. Every image operation the Extension performs — format conversion, AVIF and PDF encoding, animated GIF → WebP, resizing, cropping, annotation, blur/pixelate redaction, side-by-side format comparison, ZIP packaging and AI background removal — runs locally in your browser. We never receive, upload, store or see the images you process, and there is no "cloud processing" step you can opt into.
• The AI background removal runs on your machine. The model (u2netp) ships inside the extension package and executes through WebAssembly on your device. No image data, and no derivative of it, is sent anywhere.
• The Extension performs no analytics, telemetry, tracking, advertising or profiling. It contains no third-party analytics SDK.
• We collect only the minimum needed to provide accounts, licensing and payments — and only when you choose to sign in or purchase Pro. The free features work with no account at all.

2. Information we process

a) Extension settings and history (local only)

The following stay in your browser's own storage (chrome.storage) and are never transmitted to us:

• Preferences — default format, per-format quality, lossless WebP and progressive JPEG settings, resize-on-save rules, filename templates, per-format subfolders, theme and language.
• Save history — the filename, format, size and source page of your recent saves, capped at 50 entries on Free and 500 on Pro. Pro additionally generates a small thumbnail of each saved image; that thumbnail is created and stored locally, and is deleted when you clear history or the entry ages out.
• Per-site rules — the format/quality overrides you set for specific websites. These are stored in Chrome's sync storage, so if you are signed into your browser they may be synchronised across your own browser profiles by Google, under Google's privacy terms. They still never reach us.
• Editor work — crops, annotations, step numbers, redactions and background cut-outs exist only in the open editor tab and are discarded when it closes. Nothing is autosaved to a server.

Clearing history from the popup, or removing the Extension, removes this data from your device.

b) Account information

If you sign in (to activate or manage Pro), our authentication provider Supabase processes your email address and, if you use Google sign-in, basic Google profile information (name, email, avatar). If you use a magic link, only your email address is processed. We use this solely to identify your account and grant your license.

c) Purchase information

Payments are handled by Paddle, our Merchant of Record. Paddle processes your payment details and billing information; we never receive or store your full card details. We store a record of your license (plan, status, whether a trial is active, start/renewal dates) and the Paddle customer/transaction identifiers linked to your account.

d) Device and licensing data

To enforce the three-device limit on a Pro license, the Extension sends — only when you are signed in — a randomly generated installation identifier, the browser family it detects (Chrome or Edge) and your access token, and we store a "last seen" timestamp against each device. That identifier is generated on your device, is not linked to any advertising profile, and cannot identify you personally on its own. You can view and revoke your devices at any time from your dashboard.

e) What we deliberately do not collect

No browsing history, no list of pages you visit, no image URLs, no image content or hashes, no IP-based location profiling, no usage counters tied to your identity, and no keystrokes or page text.

3. Permissions the Extension requests, and why

Chrome shows these at install time. Each one exists for a specific function:

• downloads — to hand the converted file to your browser's own Save dialog. We never see the destination you pick.
• contextMenus — to add the right-click "Save image as type" menu.
• offscreen — to run the image decoder/encoder in a hidden document, since a service worker has no canvas.
• storage — for the settings, history and per-site rules described above.
• scripting and tabs — to read the image you right-clicked from the page, to collect the images on the page for "save all", to show hover dimensions, and to open the editor and comparison tabs.
• notifications — to tell you when a save fails, rather than failing silently. The notification text stays on your device.
• alarms — to schedule background housekeeping: re-checking your Pro license periodically, and closing the hidden converter document once it has been idle.
• Access to all websites (<all_urls>) — required because an image you want to save can be on any site. This access is used only to fetch the image bytes you asked for; the Extension does not read, log or transmit page content.

4. Network connections the Extension makes

There are exactly two kinds, and no others:

• The image you asked to save — fetched from the website you are on, exactly as your browser would fetch it normally.
• Your license — requests to our Supabase project (bukkmvuyitzyikbnfvur.supabase.co) and to images.prepphint.com, only when you are signed in, to verify Pro and register/refresh your device slot.

If you never sign in, the Extension makes no requests to us at all.

5. How we use information

• To create and secure your account.
• To verify and grant your Pro license across your devices, and to enforce the device limit.
• To process your purchase, trial and renewals, and to provide receipts (via Paddle).
• To respond to support and refund requests.

We do not sell or share your personal information, we do not use it for advertising, and we do not use it to train any model.

6. Service providers

• Supabase — authentication and database (account, license and device records).
• Paddle — payment processing and Merchant of Record (billing, taxes, receipts, refunds). See Paddle's Buyer Privacy Notice.
• Google — only if you choose Google sign-in; and Chrome's own sync if you are signed into your browser.
• Cloudflare — hosting and CDN for this Site.
• No webfont CDN. This Site previously loaded its typefaces from Google Fonts, which meant Google saw a request for every page view. As of August 7, 2026 the fonts are served from this domain, so that no longer happens. The Extension has always bundled its own fonts.

7. Cookies and local storage on this Site

We use no advertising or analytics cookies. When you sign in, Supabase stores an authentication session in your browser's local storage so you stay signed in; signing out clears it. Cloudflare may set strictly necessary security cookies, and Paddle sets its own cookies on the checkout it serves.

8. Data retention

We retain account, license and device records for as long as your account exists, or as long as needed to provide the service and meet legal and accounting obligations (Paddle retains transaction records for the period tax law requires). Device rows are removed when you revoke a device. You may request deletion of your account at any time.

9. Your rights

Depending on your location, you may have rights to access, correct, export or delete your personal data, and to object to or restrict certain processing. To exercise any right, email hello@prepphint.com — subject line "Delete my account" works for erasure. For payment-related data held by Paddle, you may also contact Paddle directly. Note that deleting your account also ends any active Pro license.

10. International transfers

We are based in India, and our providers (Supabase, Paddle, Cloudflare, Google) operate globally. Where your data is transferred out of your region, those providers rely on their own safeguards, including the EU Standard Contractual Clauses where applicable.

11. Children

The service is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their data.

12. Changes

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.

13. Contact

PreppHint (Nixologic)
Near Railway Line, Ketari Bagan
Ranchi, Jharkhand 834010
India
Email: hello@prepphint.com