Privacy Policy

Who we are

ExtHub is operated by ExtHub. Contact: mayzervan9@gmail.com. Address / country: Ukraine, Ukraine.

Browser extensions listed on ExtHub are primarily local-first tools. Core extension features that run in your browser process page content on your device. ExtHub’s website handles accounts, catalog pages, and Pro billing — not the content of pages you browse with an extension.

Data we collect

Account data: name, email address, password hash, email verification status, and optional pending email-change tokens.

Billing data: subscription records (extension, plan, status, start/end dates, cancellation timestamps), payment references, amounts in USD and UAH, payment provider status, and webhook metadata needed to confirm payment.

Product-interest activity (signed-in users only): pages and extension landings you open on ExtHub, catalog filters/search terms, and billing actions such as starting checkout or canceling a subscription. We use this to understand interest and, later, to offer relevant Pro deals. We do not record the content of websites you visit inside browser extensions.

Technical data: session cookies, CSRF tokens, IP address and user-agent as processed by our hosting stack and server logs for security and abuse prevention.

We do not sell personal data. We do not use advertising trackers on ExtHub for cross-site ads.

Why we process data (purposes & legal bases)

Provide the service and account (contract): registration, login, email verification, profile updates, subscription status for Pro unlocks.

Payments (contract / legal obligation): create invoices via the payment provider (for example Monobank acquiring), reconcile webhooks, keep payment records required by tax and accounting rules.

Product analytics & offers (legitimate interests): measure which ExtHub pages and extensions signed-in users visit so we can improve the catalog and eventually send relevant subscription offers. You can object by contacting mayzervan9@gmail.com.

Security and fraud prevention (legitimate interests / legal obligation): session integrity, abuse detection, audit of billing events.

Support (contract / legitimate interests): respond to requests sent to mayzervan9@gmail.com.

Legal compliance: respond to lawful requests and defend claims where required.

Payment providers

Card and acquiring payments are processed by our payment provider. ExtHub does not store full card numbers on its servers. The provider may process payment data under its own privacy terms.

Prices are shown in USD. Depending on the acquiring setup, the charge may be converted to UAH (or another settlement currency) using a rate configured for checkout.

Sharing

We share data only with processors needed to run ExtHub: hosting, email delivery, and the payment provider. We do not share data with extension “content” backends for browsing activity, because ExtHub does not receive that browsing content from local-first extensions.

We may disclose data if required by law or to protect rights, safety, and security.

Retention

Account data is kept while your account remains active and for a reasonable period afterward if needed for disputes or legal duties.

Billing and invoice-related records are retained for the period required by applicable accounting and tax rules.

Signed-in activity logs (page/extension interest) are retained for a limited period (typically up to one year) and then deleted or aggregated.

Server logs are kept for a limited operational window unless a security investigation requires longer retention.

Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or export personal data, and to object to certain processing (including interest analytics / offers). Contact mayzervan9@gmail.com to exercise these rights.

You may withdraw consent where processing is consent-based. Marketing emails, if we introduce them, will include an unsubscribe option.

You may lodge a complaint with a supervisory authority in your country of residence.

Children

ExtHub accounts and paid subscriptions are intended for users who can enter a binding contract in their jurisdiction. Do not register if you are below the applicable age.

International transfers

Infrastructure or processors may be located outside your country. Where required, we rely on appropriate safeguards offered by providers or applicable transfer mechanisms.

Changes

We may update this policy. The effective date above will change when we do. Continued use of ExtHub after an update means you acknowledge the revised policy.