Privacy Policy
DefyRot is a Chrome extension and website that keeps readable copies of the web pages you save, so you still have them when the original link stops working. This policy explains what information DefyRot handles, where it is kept, and the choices you have. DefyRot is built to keep as little as possible: your saved pages live on your own device, and anything we back up for you is encrypted before it leaves it.
Last updated September 25, 2026
Information we collect
Account information. When you create an account we store your email address and a securely hashed password (we never see or store your password in plain text). If you sign in with Google, we receive your email address and basic profile information (your name and profile picture) from Google. We use only your email address to identify your account.
Plan information. Whether your account is on the Free, Pro or Lifetime plan, and when a paid plan renews or ends.
Encrypted backups (optional, Pro). If you turn on cloud sync, your saved pages are encrypted in your browser with a key derived from a sync passphrase that only you know. We store only that encrypted data, together with technical fields needed to sync it (random identifiers, timestamps and a deletion marker). We cannot read the pages, their titles or their addresses, and we never receive your sync passphrase or key.
Security records. Short-lived records needed to keep your account safe, such as a log of password-change attempts (used to limit abuse) and one-time codes that connect the extension to your account.
Information that stays on your device
The pages you save with the extension (their text, images, titles and addresses), your search index and your settings are stored locally in your browser. They are not sent to us. To tell you when a saved link has stopped working, the extension may request the original address of a saved page directly from your browser; that request goes to the website that hosts the page, not to us.
How we use information
- To create your account, sign you in and keep you signed in on the website and in the extension.
- To provide the features of your plan, including encrypted cloud sync for Pro.
- To send essential messages about your account, such as email confirmation and password-reset emails.
- To protect the service against abuse and to fix problems.
We do not sell your information, we do not show ads, and we do not use your information to build advertising profiles.
Google user data
If you choose "Continue with Google", DefyRot requests only basic sign-in permissions (your email address and public profile). We use this information solely to create your account and sign you in. We do not access your Gmail, Google Drive, contacts or any other Google data, and we do not share Google user data with anyone except the service providers listed below that run the sign-in for us.
DefyRot's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Service providers
- Supabase hosts our database and handles sign-in (including Google sign-in).
- Our web host serves the defyrot.com website.
- A payment provider will process payments when paid plans are purchased. Card details go directly to them; we never see or store your full card number.
These providers process information only to provide their service to us. We may also disclose information if required by law.
Security
Connections use HTTPS. Access to account data is restricted so that each account can reach only its own records. Cloud backups are end-to-end encrypted with AES-256-GCM before upload. No system is perfectly secure, but we design DefyRot so that the most sensitive data, your saved pages, is either kept on your device or unreadable to us.
Keeping and deleting your data
We keep your account information for as long as you have an account. You can delete saved pages at any time in the extension; deleting a synced page also removes its encrypted copy from our servers on the next sync. To delete your account and all associated data, email support@defyrot.com from the address on your account and we will delete it within 30 days. Removing the extension deletes the pages stored in your browser.
Your rights
You can ask us for a copy of the account information we hold about you, ask us to correct it, or ask us to delete it, by emailing support@defyrot.com. Depending on where you live, you may have additional rights under local law, and you may contact your local data-protection authority.
Children
DefyRot is not directed to children under 13, and we do not knowingly collect information from them.
Changes to this policy
If we change this policy, we will update the date at the top of this page. For significant changes we will also let you know by email or in the product.
Contact
Questions about privacy: support@defyrot.com.