Privacy Policy

Effective date: 7 August 2026 · Last updated: 7 August 2026

Vulpitza (“we”, “our”, “us”) operates the Vulpitza browser extension and the Vulpitza Cloud service at vulpitza.com. This policy explains what data we collect, why we collect it, and how you can control it.

1. What We Collect

When you create a Vulpitza account or use Vulpitza Cloud, we collect:

Email address — used for account authentication, password resets, and transactional emails.
Display name (optional) — shown inside the extension if you provide one.
Snippet and settings data — the text snippets, folder structure, and extension settings you choose to sync to Vulpitza Cloud.
Device label (optional) — a name you assign to identify a browser in sync conflict dialogs.
Custom celebration assets (optional, Pro/Enterprise) — images and audio files you upload for celebration animations.
Usage counters — how many times each snippet has been expanded, stored locally in your browser and optionally synced.
Authentication provider identity — if you sign in with Google or Facebook, we receive a unique identifier and email address from that provider.
Subscription status — your current plan (Free, Pro, Enterprise) and, if you subscribe via Stripe, a reference to your Stripe customer record. We do not store card numbers.

If you use Local or Browser Sync storage mode, none of your snippet data is transmitted to our servers. It stays in your browser.

2. How We Use Your Data

To authenticate you and keep your session secure.
To sync your snippets and settings across your devices (Cloud mode only).
To send transactional emails (email verification, password reset). We send no marketing email.
To process subscription payments via Stripe.
To display your tier and account details inside the extension.

3. Data Sharing

We do not sell your data. We do not share your data with third parties for advertising. The only third-party services that may receive data are:

Stripe — payment processing. Governed by Stripe’s Privacy Policy.
Google / Facebook — only if you choose to sign in or link your account with those providers.
Your own server (Enterprise / Self-Hosted) — if you configure the extension to use a self-hosted Vulpitza server, your data is sent to and stored on that server, not ours.

4. Data Retention

Your data is retained for as long as your account exists. When you delete your account, all associated snippet data, settings, and personal information are permanently deleted from our servers within 30 days.

5. Your Rights

You may at any time:

Export all your data using Settings → Data → Export backup.
Delete your account by contacting us at [email protected].
Request a copy of all personal data we hold about you.
Correct inaccurate data by updating it in the extension or contacting us.

If you are in the European Economic Area, you have rights under the GDPR, including the right to erasure, restriction, and to lodge a complaint with your supervisory authority.

6. Cookies and Local Storage

The Vulpitza extension stores data in your browser’s extension storage (not cookies). The vulpitza.com website may use a session cookie for authentication. We do not use tracking or advertising cookies.

7. Security

All data in transit is encrypted via HTTPS/TLS. Passwords are hashed and never stored in plain text. Access tokens are short-lived JWTs. We apply reasonable technical and organisational measures to protect your data.

8. Children

Vulpitza is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Changes to This Policy

We may update this policy. If we make material changes, we will update the effective date above. Continued use of Vulpitza after changes constitutes acceptance of the updated policy.

10. Contact

Questions about this policy? Contact us at [email protected].