Effective version: 2.0.0
Effective date: April 10, 2026
1. Overview
This Privacy Policy describes how Measuremate ("we", "us") handles data in connection with the Measuremate browser extension (the "Extension") and the website measuremate.xyz (the "Website"). We aim to collect as little personal data as possible and to be transparent about what leaves your device.
2. The Extension
2.1 What runs locally
Measurements, element inspection, guides and all visual features run entirely inside your browser. The Extension does not collect, transmit or store the content of the pages you measure. It does not read page text, form inputs, credentials or screenshots. No analytics, telemetry or crash reports are sent from the Extension.
2.2 What is stored locally
The Extension uses Chrome storage to persist the following on your device only:
- An activation hash (SHA-256 of your license data), if you have a paid license.
- A timestamp tied to that activation.
- An optional "dismiss until" timestamp for the paywall.
- UI preferences (panel position, toggles, inspector settings).
You can clear this data at any time via the Extension's "Clear storage" action or by removing the Extension.
2.3 What the Extension sends to our backend
Network requests from the Extension only occur as part of the license flow. No request is made while you are measuring pages or browsing. The following data is sent to our backend at api.measuremate.xyz:
- License activation: your license key and a client-generated timestamp.
- Email verification: the six-digit verification code you received by email and the original timestamp.
- License check at start: the activation hash stored locally, to confirm the license is still valid.
The Extension does not send your IP address, browsing history, user agent or any personal identifier beyond what is required for the request itself.
3. The Website
3.1 Analytics
The Website uses a third-party web analytics service to understand how visitors use the landing page. This is limited to anonymous, aggregated usage data: page views, click heatmaps, outbound link clicks and bounce rate. No session recordings are made, and no form input or personal data is collected by the analytics script. The provider sets its own cookies to identify returning visitors.
3.2 Gumroad
Purchases are handled by Gumroad. When you click "Buy", you are redirected to or overlaid with Gumroad's checkout. Gumroad loads its own script (gumroad.js) on the Website. We do not see your payment details; Gumroad processes them under its own Privacy Policy.
4. Third parties we rely on
- Payment and license provider (Gumroad) — checkout, payment processing and license key issuance. We query their API with your license key during activation.
- Transactional email provider — delivers the verification email. We pass the recipient email address and the verification code so the message can be sent.
- Cloud hosting provider — runs our backend and stores activation records.
- Web analytics provider — anonymous usage statistics for the landing page (page views, clicks, outbound links, bounce rate).
5. What we store on our servers
When you activate a license, the following is written to our database:
- The license key and a hash derived from it.
- A client-provided timestamp and a counter of verification attempts.
- The customer email address returned by the license provider, used to send the verification email.
- The raw API response from the license provider, so we can audit license issues. This may include your name and order metadata as provided by them.
Verification codes themselves are generated, emailed and discarded — they are never stored on our side.
6. Cookies
The Extension does not use cookies. The Website sets cookies only through its third-party web analytics provider to identify returning visitors and measure usage. No marketing or advertising cookies are set. Third-party services such as Gumroad may set their own cookies on their own checkout pages under their respective privacy policies.
7. Data retention
Activation records are retained for as long as the license is in use, so that we can verify it on each extension start. You can request deletion at any time (see Section 8). Analytics data is retained according to the default retention settings of our analytics provider.
8. Your rights
Depending on where you live, you may have rights under the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), or similar laws. These typically include:
- The right to access the personal data we hold about you.
- The right to correction or deletion.
- The right to withdraw consent (where processing is based on consent).
- The right to object to or restrict processing.
- The right to lodge a complaint with a supervisory authority.
To exercise any of these rights, email us at hello@measuremate.xyz. We will respond within a reasonable timeframe.
9. Children
Measuremate is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has provided us with personal data, contact us and we will delete it.
10. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected in the effective version and effective date above. Continued use of the Extension or Website after an update constitutes acceptance of the updated policy.
11. Contact
Questions, requests or complaints: hello@measuremate.xyz.