Privacy Policy
Last updated: June 15, 2026
This Privacy Policy describes how MetaClean Web ("we", "our", or "the Extension") handles information when you use our Chrome extension. MetaClean Web processes files you select entirely on your device. We do not read page text, collect browsing history, or upload file contents to our servers.
1. Information We Collect
1.1 Data processed on your device (not uploaded)
MetaClean Web is a local-first browser extension. It activates only when you select or paste files for upload. We do not read web page text, track browsing history, or collect the following:
- File contents: Images, PDFs, and Office documents are read in browser memory for metadata scanning and scrubbing. File bytes are never uploaded to any server.
- Page text & browsing history: We do not read, index, or store the text of web pages you visit or your browsing history.
- Personal identifiers: No account registration is required for the free tier. We do not collect your name, email, geolocation, IP address, or similar identifiers through the Extension.
- Analytics: We do not use Google Analytics, Mixpanel, or any third-party behavioral tracking in the Extension.
1.2 Limited data sent to our servers
If you purchase a paid license (Pro, Team, or Enterprise), payment is handled by Creem (Merchant of Record). We do not store your credit card or bank details.
For license activation and verification, the Extension sends your License Key and a device fingerprint hash (SHA-256 derived from browser signals) to our license API at metaclean.zhangyuanbo.top/api/license (proxied to Creem). This data is used only to validate your license and prevent abuse — it does not include file contents or directly identifiable personal information.
2. Data Storage
2.1 Local storage
Extension data is stored on your device using the following mechanisms:
- In-memory processing: File bytes are held in browser memory only while you scan or scrub a file. MetaClean does not maintain a persistent copy of your files.
- chrome.storage.local: Stores extension settings, compliance templates, audit report summaries, and license activation state.
This data exists only on your device and is never synchronized to our cloud servers.
2.2 Data control
You have full control over locally stored Extension data:
- Adjust upload detection, alerts, and scrubbing preferences in Settings.
- Create, edit, or delete compliance templates stored locally (paid tiers).
- Clear all Extension data with one click in Settings.
- Review audit summaries generated after scrubbing sessions (paid tiers).
- Deactivate your license on this device before uninstalling or switching computers.
- Download scrubbed files and compliance reports to your local Downloads folder (paid tiers).
2.3 What we do not retain
MetaClean Web does not upload or archive your file contents on our servers.
- Original and scrubbed file bytes remain under your control on your device.
- When you download a cleaned file, Chrome saves it to your chosen folder — MetaClean does not keep a server-side copy.
3. Data Sharing & Disclosure
We do not sell, rent, or share your file contents or browsing activity because we do not collect them.
The only exceptions are:
- Payment processing: When you purchase a paid license, payment information is processed directly by Creem. We receive only the License Key and verification status from Creem.
- Legal requirements: If we receive a valid legal request (such as a court order), we may be required to disclose information we hold. Because we do not collect file contents or browsing data, there is effectively no user content to disclose.
4. Data Security
Because your files are processed locally, security depends primarily on your device. We recommend:
- Keep your operating system and Chrome browser updated to the latest version.
- Use device-level full-disk encryption (such as FileVault or BitLocker).
- Do not install the Extension on untrusted or shared devices.
License verification requests use HTTPS encryption.
5. Children's Privacy
MetaClean Web is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will take steps to delete such information.
6. International Data Transfers
File contents are not uploaded. For paid license verification, the License Key and device fingerprint hash are sent to our license API at metaclean.zhangyuanbo.top/api/license (Creem backend; servers may be located in the United States or Europe) for verification only.
7. Changes to Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Extension update changelog or on this page. We recommend checking this page periodically for the latest version.
Your continued use of the Extension constitutes your acceptance of the updated Privacy Policy.
8. Contact Us
If you have any questions or concerns about this Privacy Policy, please contact us at:
- Email: support@zhangyuanbo.top
9. Third-Party Services
The Extension uses the following third-party services:
- Creem: Payment processing and license management. Creem acts as the Merchant of Record (MoR) to process transactions and is GDPR and PCI-DSS compliant.
Apart from the above, the Extension loads no third-party scripts, embeds no tracking pixels, and connects to no analytics services.
10. Your Rights
Under applicable data protection laws (including GDPR and CCPA), you have the following rights:
- Right of access: Settings, templates, and audit summaries stored locally can be viewed in the Extension at any time.
- Right of deletion: You can clear all local Extension data with one click in Settings.
- Right of data portability: Paid-tier users can export scrubbed files and compliance audit reports to their device.
- Right to object: You can disable or uninstall the Extension at any time through Chrome's extension management page.
To exercise the above rights, please contact us using the information in Section 8. Because we do not hold your file contents on our servers, most rights can be exercised directly in the Extension.
11. Host permissions
To detect file uploads across websites, the Extension requests access to all URLs (<all_urls>). This permission is used only to hook into file inputs, drag-and-drop, and paste events so MetaClean can scan files you choose to upload. It is not used to read page text, collect browsing history, or transmit page content to our servers.
MetaClean does not monitor what you read or type on web pages. It responds only when you interact with file upload controls on a page.