Privacy Policy
Last updated: 18 February 2025
Introduction
PenProof ("we", "us", "our") operates the PenProof browser extension and website. This Privacy Policy explains what data we collect, why we collect it, and how we handle it.
Data we collect
Article text (transient)
When you scan a page, the extension sends the extracted article text to our servers for analysis. We do not store the article text. It is processed, scored, and immediately discarded.
Anonymous device identifier
On first install, the extension generates a random anonymous identifier. This is used solely to track your usage quota and subscription status. It is not linked to your real identity unless you voluntarily link it to an email during a paid subscription.
Subscription data
If you purchase a paid plan, your email address and subscription status are stored so we can verify your plan. Payment details (card number, billing address) are handled entirely by our third-party payment processor — we never see or store them.
Basic request logs
We log minimal request metadata (IP address, timestamp, page URL) for abuse prevention. Logs are automatically deleted after 30 days.
Data we do NOT collect
We do not collect or store: your browsing history, the full text of articles you scan, passwords, cookies from other sites, keystrokes, screenshots, or any personally identifiable information beyond what is listed above.
How we use your data
- • To analyse text and return AI-likelihood scores to the extension.
- • To enforce usage limits on the free tier.
- • To verify your subscription status if you are a paid user.
- • To prevent abuse and diagnose technical issues.
Third-party services
We use a third-party payment processor to handle subscriptions and billing. Your payment details are processed directly by them — we do not have access to your card information. We do not sell, rent, or share your data with advertisers or data brokers.
Data retention
- • Article text: not stored — discarded immediately after scoring.
- • Request logs: deleted after 30 days.
- • Subscription data: retained while your account is active, deleted within 90 days of cancellation.
- • Device identifier: stored locally in your browser — cleared by uninstalling the extension.
Your rights
You can request deletion of your data at any time by emailing us at hello@penproof.dev. If you are in the EU/EEA, you have additional rights under GDPR including the right to access, rectify, and port your data. We will respond within 30 days.
Children
PenProof is not intended for children under 13. We do not knowingly collect data from children.
Changes to this policy
We may update this policy from time to time. Material changes will be announced via the extension or our website. Continued use after changes constitutes acceptance.
Contact
For privacy-related questions or data deletion requests, email us at hello@penproof.dev or use our contact form.