Camera and hand tracking
Camera frames and hand landmarks are processed on your device using the model and runtime packaged with the extension. No camera recording, video upload or audio capture takes place. Tracking timings and detection status are held in memory for the current session. Hiding the panel keeps tracking active; Stop releases the camera.
The extension checks active tab addresses and webpage element positions and interaction attributes locally to route scrolling, zoom and clicking. It does not retain browsing history or collect page text, form values, passwords, cookies or network-request contents. Camera access and optional website access require your explicit permission.
Local preferences and Pro access
Preferences and the permission-introduction choice are stored in the extension. Badge display preferences and Pro installation credentials use browser extension local storage. Pro credentials are restricted to trusted extension contexts and are not exposed to websites or content scripts.
Activation and refresh send the installation identifier, one-time activation code or rotating refresh credential, approved extension origin and a request nonce to the HandBrowse service. They do not send camera, landmark or browsing data. Signed offline access lasts up to 24 hours after refresh. Uninstalling removes local extension data; revoke installations separately in Account.
Website, account, payments and support
The website does not request your camera. Demonstrations are illustrations. We do not use advertising or marketing analytics. Clerk processes identity, sign-in and session data. Neon stores account identifiers, orders, payment references, purchased entitlements, hashed activation codes and hashed installation refresh credentials. Razorpay processes payment details; we do not store card numbers or security codes.
When you contact support, we process your email address, optional name, chosen topic, message and optional browser/extension details to investigate and reply. Resend delivers your message to the configured HandBrowse support inbox. No attachments are accepted. Do not submit credentials, activation codes, recordings or private webpage content.
Vercel hosts the website and provides BotID abuse checks on browser forms. These providers may process request metadata, IP addresses and browser/device security signals. Support rate limits store keyed hashes of request IPs and email addresses, rather than raw IPs or addresses. No website account is required for free gestures or support.
Use, sharing and retention
We use data only to provide, secure and support HandBrowse, fulfil purchases, prevent abuse and meet legal obligations. We do not sell personal information or use camera or browsing information for advertising. Information is shared only with the service providers named above as needed for those purposes, when legally required, or to protect users and the service.
HandBrowse complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. We do not use extension data for unrelated profiling or credit decisions. Support staff review information you voluntarily submit for assistance; they do not receive your camera feed or browsing history.
Camera frames and landmarks are not retained as recordings. Activation codes expire after five minutes. Account, transaction and installation records are kept while needed to provide access, resolve disputes, prevent fraud or meet accounting and legal requirements. Support correspondence is retained only as needed to resolve requests and related obligations. Provider security logs follow the configured retention periods. Service providers may process data outside your country under their service arrangements.
Your choices and contact
You can stop tracking, revoke browser permissions, sign out and revoke Pro installations. For access, correction, account deletion or other privacy rights, use the Privacy & data topic at /support or email support@compilecraft.in. We may verify ownership before acting. Required transaction records may need to be retained after account deletion.
Operator: CompileCraft, Sector 124, Mohali, Punjab 140301, India. GSTIN: 03DRUPK4947L1Z2. Contact: support@compilecraft.in. Changes to this policy will be published here; material changes to extension data practices will be disclosed before they take effect.