Deal Radar — Privacy Policy

• All of your data stays on your own device, inside your browser.
• Deal Radar has no servers, no accounts, no analytics, and no telemetry.
• Nothing you enter is ever transmitted, shared, or sold.
• The extension is fill-only: it never submits a form, never places an order, and never handles payment-card information.

To autofill checkout forms, the extension stores the profile fields you enter: full name, email address, phone number, shipping address (address lines, city, state, ZIP/postal code, country), and a label you choose.

These are saved in your browser's local extension storage as ordinary (unencrypted) data, the same way the browser stores your own autofill entries. They never leave your device.

If you use the login vault, the retailer usernames and passwords you add are encrypted before they are written to disk:

• Encryption: AES-GCM-256.
• Key derivation: PBKDF2-HMAC-SHA256, 600,000 iterations, with a random per-vault salt, from a master password that you choose.
• Your master password is never stored anywhere. Only a verifier blob and the encrypted credentials are kept in local storage.
• The unlocked encryption key exists only in ephemeral session storage while the vault is unlocked, and is discarded when the browser session ends or you lock the vault. It is never written to disk in plaintext.

• It does not collect or store payment-card numbers, CVVs, or any financial instrument. Payment is always entered by you, manually, on the retailer's own page.
• It does not submit forms, click "Place order" / "Sign in", or synthesize keystrokes. You always take the final action yourself.
• It does not transmit any data to us or to any third party. There is no backend, no remote logging, and no code loaded from a remote server.
• It does not track your browsing history. Content scripts run only on Amazon, Walmart, and Best Buy pages, and only to fill fields.
• It does not sell or share your data — the data never leaves your machine.

• storage — to save your profiles and encrypted vault locally.
• activeTab — to fill fields on the page you are viewing, only when you click an autofill button in the popup.
• Host access to amazon.com, walmart.com, and bestbuy.com — to run the checkout autofill on those retailers only.

Your data lives only in your browser profile. You can delete any profile or credential from the extension popup at any time, and removing the extension deletes all of its stored data.

If this policy changes, the updated version will be published at this same URL with a new "Last updated" date.