Privacy Policy

Overview

Ingredient Checker is a Chrome extension that analyzes cosmetic ingredient lists for safety. We've designed it to collect as little personal data as possible. There is no tracking, no analytics, and no advertising.

What we collect

When you analyze an ingredient list, our server receives:

• The ingredient text you submit (the INCI list).
• The URL of the page you were on, if the extension auto-filled the list from a product page.
• Your language preference (locale), so results come back in the right language.

What we do not collect

• Your name, email, or account information — we don't have accounts.
• Your browsing history. We only see a URL when you actively trigger an analysis.
• Cookies, advertising identifiers, or any persistent tracking IDs.
• Analytics on how you use the extension. We removed Firebase Analytics for this exact reason.

How we use it

• The ingredient text is processed in real time to return a safety analysis. It is not stored long-term unless our parser fails to recognize part of it (see below).
• The page URL is logged only when ingredients can't be parsed or matched, so we can debug and improve the parser. It's saved together with the raw input that failed.
• The locale is used only to choose the response language. It's not retained.

Where data is stored

• Our API runs on Hetzner Cloud (United States data center).
• Failed-parse entries are stored in append-only log files on that server. They are not exported to any third-party analytics or warehouse.
• Successful analyses are not retained beyond serving the response.

Third-party services

Cloudflare

Our domain is proxied through Cloudflare for HTTPS and basic DDoS protection. Cloudflare may receive standard request metadata (IP address, user agent) per its privacy policy.

Firebase Remote Config

The extension uses Google's Firebase Remote Config to fetch our API base URL and maintenance flags. No personal data is sent to Firebase. Firebase Analytics is not used.

Services we do not use

• Google Analytics, Mixpanel, Amplitude, or similar tracking.
• Advertising networks.
• Social media SDKs.

Your rights

You can request deletion of any logged data tied to a URL you submitted by emailing support@ingredientchecker.beauty. Because we don't link entries to identities, we'll need the URL and an approximate date.

Children

The extension is not directed at children under 13, and we do not knowingly collect data from children. If you believe a child has submitted personal data, contact us and we'll remove it.

Changes to this policy

We may update this policy from time to time. Continued use of the extension after a change means you accept the updated policy.

Contact

Questions or concerns? support@ingredientchecker.beauty.