Privacy Policy

While the Amberlog browser extension is active, it passively reads structured data from Amazon product and seller pages you visit. From product pages: title, brand, manufacturer, category, product image, price, list price, Best Sellers Rank, star rating and rating breakdown, availability, purchase-velocity and Prime-eligibility signals, number of sellers, and buy-box seller identity. From a seller's own profile page: their name, address, description, and reputation numbers (rating, review count). From on-page reviews: the review text, rating, date, and helpful-vote count - never the reviewer's name or avatar, which we deliberately don't collect.

If you create an Amberlog account, we also collect your email address and an optional display name.

• Product data: title, brand, manufacturer, category, image, pricing, rank, rating, availability, seller identity
• Seller profile data: name, address, description, rating, review count
• On-page reviews: text, rating, date, helpful-vote count (never reviewer identity)
• Account information: email address, optional display name

We do not collect payment information, your general browsing history, or any data from non-Amazon websites. We have no advertising integrations of any kind. We use Vercel Analytics on the web dashboard for aggregated page-view statistics - it's cookieless and doesn't collect personal data or track you across other sites; see Third-Party Service Providers below.

Everything the extension captures is written first to your browser's local storage, which is the source of truth for the extension's own popup. This works fully whether or not you're signed in.

If you're signed in, each capture is also synced, best-effort, to our Supabase-backed database so your tracked history is available in the web dashboard from any device. Sync failures never block the local write, and if you're signed out, nothing leaves your browser at all.

We use this data solely to power Amberlog's own features - price/rank/rating history, seller profiles, product tracking - for your account. We do not use it for advertising, and we do not sell or share it with third parties.

We rely on a small number of infrastructure providers to operate Amberlog. We don't sell or share your data for advertising or marketing purposes - the providers below process data only as needed to run the Service itself.

• Supabase- hosts our database and handles account authentication. Your account information and synced tracking history are stored on Supabase's infrastructure. See Supabase's privacy policy.
• Resend - sends transactional emails on our behalf, such as password-reset links. Resend processes only the recipient email address and message content needed to deliver that email. See Resend's privacy policy.
• Vercel- hosts and serves the web dashboard you're reading this on. Like any web host, Vercel incidentally processes standard request data (e.g. IP address) as part of serving pages. We also use Vercel Analytics, which collects aggregated, cookieless page-view statistics on the dashboard - it doesn't identify you individually or track you across other sites. See Vercel's privacy policy.

Beyond these providers, we may disclose your information if required to by law, subpoena, or a valid request from a judicial or governmental authority, or where reasonably necessary to protect the rights, property, or safety of Amberlog, our users, or the public.

Synced data is retained for as long as your account is active. Locally cached data persists in your browser until you clear it yourself - via the extension's Settings screen ("Clear local data") or by uninstalling the extension - it is never automatically deleted or expired on our side.

You can review, edit, or clear your locally cached tracking data at any time from the extension's Settings screen. You can edit your display name from the dashboard's own Settings page at any time.

Full self-serve account deletion isn't available yet - contact us to request deletion of your account and associated data, and we'll handle it manually in the meantime.

• Authentication is handled by Supabase Auth. Passwords are stored hashed, never in plain text - we never see or have access to your actual password.
• We never request your Amazon credentials. No legitimate part of Amberlog will ever ask for your Amazon login - the extension only reads what's already visible on the page.
• Synced data is stored under your own account and is not accessible to other users.
• All traffic between the extension, the dashboard, and our backend is encrypted in transit over HTTPS/TLS.

Amberlog is a tool for Amazon sellers and business research, and isn't directed at children. We don't knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, contact us and we'll remove it.

Our infrastructure providers may process and store data in countries other than your own, including the United States. Data-protection laws in those countries may differ from the ones where you live. Where this matters under applicable law, we take reasonable steps to ensure your information continues to be protected consistent with this Privacy Policy.

We may update this Privacy Policy as the Service changes. When we do, we'll post the revised version here and update the date at the top. For material changes that affect account holders, we'll take reasonable steps to notify you - such as a notice on this site or an email to your account address.