Privacy Policy

DewSecure is built on one architectural principle: data stays on your device, and anything that can be processed locally is never sent over the network. We do not sell your data, we do not use your browsing history for advertising profiles, and we do not share any personally identifiable information with third parties for their independent marketing.

This Privacy Policy applies to your use of the DewSecure browser extension (for Chrome, Edge, Opera, and Yandex Browser based on the Chromium engine, as well as Firefox and other mainstream browsers based on the Gecko engine), the official website (dewsecure.com), the cloud authentication and model distribution services (Cloudflare Worker), and the subscription management services (Supabase + Stripe).

1. Who We Are

DewSecure is operated by an independent developer. If you have any questions about this Policy, please contact us at dewsecure9@gmail.com.

2. What Data We Collect

2.1 Account and Subscription Data (only when logging in or paying)

Email address: used for OTP login, subscription status sync, renewal reminders, and refund notifications.

Subscription status: plan tier (Free / Pro / Family), expiration date, auto-renewal cancellation status, and referral credit balance.

Device slot information: the installation_id silently reported by the extension, along with browser and operating system type, used solely to display "slots in use" on your Dashboard and to allow one-click unbinding.

2.2 Payment Data

Payments are processed by Stripe. We do not store or have access to your full card number; Stripe only returns subscription status, amount, currency, payment time, and Customer ID to us. Stripe's own privacy practices are governed by its privacy policy.

2.3 Extension-Side Local Data (never leaves your device)

URL and page content analysis: performed entirely within your browser's local sandbox, never uploaded to any server.

AI model inference: model files are securely delivered via Cloudflare Worker + R2 (with SHA-256 verification and token authentication), and inference runs entirely on-device.

Rule matching: 110,405 DNR rules take effect locally, with no network callbacks.

Block statistics: block counts are stored in the extension's local storage and are never uploaded.

The extension does not collect your browsing history, page content, form data, input records, or any browsing behavior that could identify you personally.

2.4 Server Logs for Website Visits

When you visit dewsecure.com, our servers (Cloudflare) process standard request metadata: anonymized IP, request timestamp, browser type and version, operating system name and version, requested URL, and referrer URL. This data is used only for security protection and basic operations, never for advertising or user profiling.

3. How We Use Data

We use data for account login and verification, subscription status sync and family group management, payment and refund processing, device slot limits and one-click unbinding, abuse and free-riding prevention (device fingerprint locks, disposable email blacklists), and referral credit settlement. All of these uses are necessary for operating the service.

4. Data Sharing and Third Parties

We do not sell your personal data. Necessary information is shared with third parties only in the following scenarios:

Stripe: processes payments and subscription management; receives your email and subscription metadata.

Supabase: stores account and subscription records; data resides in its hosting region.

Cloudflare: provides Worker authentication, R2 model distribution, and website hosting.

Legal requirements: disclosure only in response to valid legal process, and we will notify you in advance to the extent permitted by law.

5. Data Retention

Account data: deleted when you actively delete your account or after 24 consecutive months of inactivity.

Subscription and payment records: retained as required by tax and accounting regulations (typically 7 years).

Block statistics and device slots: primarily stored locally, no longer retained after unbinding or uninstalling the extension.

6. Your Rights

You may exercise the following rights at any time through your Dashboard or by contacting dewsecure9@gmail.com:

Access and export your account and subscription data; correct your email or device information; delete your account and associated data (during an active subscription period, certain data must be retained until the subscription ends); withdraw consent for non-essential data processing.

7. Children

DewSecure is not intended for children under 13 (or such lower age as may be specified by your jurisdiction). We do not knowingly collect personal data from children. If we become aware of any inadvertent collection, we will delete it as soon as possible.

8. Cross-Border Transfers

Your data may be stored in Supabase and Cloudflare infrastructure located in Singapore, the United States, or the European Union. We ensure the lawfulness of cross-border transfers through Standard Contractual Clauses (SCCs) or equivalent mechanisms.

9. Policy Updates

We may update this Policy from time to time. Material changes will be announced on the official website or by email. Continued use of the service constitutes acceptance of the updated Policy.

This Policy is provided in multiple languages. In the event of any ambiguity or conflict between language versions, the English version shall prevail.

10. Contact

Privacy and data rights: dewsecure9@gmail.com

Subscriptions, refunds, and account: dewsecure9@gmail.com