← Back to AmbiWebZ

Privacy Policy

Last updated: March 1, 2026

AmbiWebZ ("we", "us", "our") operates the AmbiWebZ Chrome extension and the ambiwebz.com website. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your information.

1. Data We Collect

Category	Data	Purpose
Account	Email address, username, avatar URL	User identification & authentication
Browsing Activity	URLs of pages where you interact with AmbiWebZ	Associating comments and annotations with specific pages
User Content	Comments (AmbiCasts), annotations, notes, bookmarks, polls, votes, emoji reactions, keyword interests, web trails	Core functionality — enabling discussions and note-taking
Presence	Active status on a page (username, last seen timestamp)	"Who's here" feature — showing active users on a page
Gamification	Badges earned, badge timestamps	Achievement system
Moderation	Reports submitted (reason, details)	Content moderation and community safety
Payment	Stripe customer ID (we never store card numbers)	Premium subscription management
Preferences	Extension settings (notification preferences, appearance, domain blacklist, keyword alerts)	Personalizing the extension experience

What We Do NOT Collect

• Page content or text of websites you visit (except text you explicitly highlight for annotations)
• Browsing history beyond pages where you actively use AmbiWebZ
• Passwords or credit card numbers
• Data from pages on your domain blacklist (the extension does not load at all)

2. How We Use Your Data

• Provide the service: Display comments, annotations, and notes on webpages; show presence; deliver notifications
• Improve the product: Aggregated, anonymous usage statistics (e.g., total number of posts) to guide development priorities
• Moderation: Enforce community guidelines and respond to reports
• Payments: Process premium subscriptions via Stripe

We do not sell, rent, or share your personal data with advertisers or data brokers.

3. Third-Party Services

Service	Purpose	Privacy Policy
Supabase	Database, authentication, real-time sync	supabase.com/privacy
Google (OAuth)	Sign-in via Google account	policies.google.com/privacy
Stripe	Premium subscription payments	stripe.com/privacy
Google AdSense	Advertising on the ambiwebz.com website only (not within the Chrome extension). May use cookies and tracking for personalized ads.	policies.google.com/technologies/ads

4. Legal Basis (Art. 6 GDPR)

Data Category	Legal Basis
Account, User Content, Presence, Preferences	Art. 6(1)(b) GDPR — Performance of contract (providing the service you signed up for)
Payment (Stripe)	Art. 6(1)(b) GDPR — Performance of contract (processing your subscription)
Moderation & Reports	Art. 6(1)(f) GDPR — Legitimate interest (community safety)
Advertising (Google AdSense)	Art. 6(1)(a) GDPR — Consent (via cookie banner, where applicable)
Aggregated analytics	Art. 6(1)(f) GDPR — Legitimate interest (product improvement)

5. Data Storage & Security

• Data is stored locally in your browser via chrome.storage.local for offline access and performance
• Data is synced to Supabase cloud servers (hosted on AWS, region: eu-central-1 / Frankfurt, Germany) for cross-device access and persistence
• All communications use HTTPS/TLS encryption in transit
• Supabase enforces Row Level Security (RLS) to ensure users can only access their own data
• Data transfers to third-party services outside the EU (Stripe, Google) are governed by Standard Contractual Clauses (SCCs) in accordance with GDPR requirements

6. Your Rights

• Export: You can export all your data as JSON from Settings → Data → "Export My Data"
• Delete: You can delete your account and all associated data from Settings → Account → "Delete Account"
• Anonymous Mode: You can enable Anonymous Mode to hide your username from other users
• Domain Blacklist: You can prevent the extension from loading on specific websites
• Access & Correction: Contact us at privacy@ambiwebz.com to request access to or correction of your data

7. Data Retention

• Your data is retained as long as your account is active
• When you delete your account, all user-generated content, badges, and preferences are permanently removed
• Presence data (user activity on a page) expires automatically after 2 minutes of inactivity
• Backup copies may persist in encrypted backups for up to 30 days after deletion

8. Children's Privacy

AmbiWebZ is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child under 13 has provided us with data, please contact us at privacy@ambiwebz.com and we will promptly delete it.

9. Chrome Web Store User Data Policy Compliance

• We only request permissions essential to the extension's core functionality
• The <all_urls> permission is required because AmbiWebZ provides a community discussion sidebar on every webpage — the core feature requires the content script to inject on any URL the user visits
• Data collected through the extension is used solely for providing the AmbiWebZ service and is not transferred for purposes unrelated to the extension's functionality

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the extension's Settings page or through an in-app notification. The "Last updated" date at the top of this page reflects the most recent revision.

11. Contact Us

If you have questions about this Privacy Policy or your data, reach out to us:

• Email: privacy@ambiwebz.com
• Website: ambiwebz.com