GClimb Chrome extension privacy policy

1. What the extension does

When you open it, the extension shows, in a panel on top of the page, the profile of the online store open in the tab: platform, installed apps and pixels, catalog and best sellers, social accounts and, for a signed-in GClimb account and depending on its plan, its Google ads, search traffic and keywords.

2. Data read in the page

While the panel is open, the extension reads the tab's page in your browser: the page code (to recognize the platform, tags and apps), links to social accounts, and the store's public files (catalog, sitemap, product pages), requested from the store itself. What it reads stays on your device: it is sent neither to GClimb nor to anyone else. To show product images and the store's icon, the panel loads them from the store or its image host, without telling them which page the request comes from.

The extension never reads what you type into the page's fields (passwords, forms) and never extracts your cart or payment data from it. It does not run on Chrome's internal pages, and injects nothing into a tab where the panel is closed, apart from reading the session of a gclimb.io tab as described under "Sign-in".

3. Data sent to GClimb

Only when you are signed in to a GClimb account, and only for a page that looks like an online store. While the panel is open or pinned, the domain of each store shown is sent with no further action from you:

• the domain name of the store shown (for example store.com), never the full page address;
• your GClimb session token, to identify your account;
• as with any request to a server, the connection's IP address, kept in our logs for security and usage limits.

4. What GClimb does with this data

• GClimb returns the store's profile. Ad previews shown in the profile are downloaded from gclimb.io, without your session token.
• To apply usage limits, GClimb records, for your account, each store viewed with the time and the request's IP address, and so counts the distinct stores viewed per day. These records are kept for a limited time.
• When you click "Track this store" (paid plans), the domain is added to your watchlist.

5. Data kept in the browser

• Your GClimb session, in the extension's local storage: access token, account email and, after an email and password sign-in, refresh token. It is removed on sign-out or uninstall.
• Your panel display preference (pinned or not) and, after "Sign out", a flag that prevents automatically reusing the session of a gclimb.io tab, in the extension's local storage. When pinned, the panel opens in every tab, on each page load, except in the tabs where you closed it.
• Whether the panel is open in each tab, in the extension's session storage: never written to disk, cleared when the tab or the browser closes.
• Profiles already shown, in memory, while the panel stays open.

6. Sign-in

You can sign in with your GClimb email and password: they are sent directly to GClimb's authentication service and never kept by the extension. The extension can also reuse the session of a signed-in gclimb.io tab: when you click "Sign in with GClimb", or automatically when the panel opens if its own session is missing or expired, unless you signed out from the extension. In that case only the access token and the email are copied, never the refresh token.

7. What GClimb never does

• No sale, rental or transfer of data.
• No ads, trackers or analytics in the extension.
• No use of data beyond showing the profile and the watchlist you ask for, and no use to determine creditworthiness or for lending.
• No remote code: everything the extension runs is in its package.

8. Permissions

• scripting: read the tab's page while the panel is open, and the session of an open gclimb.io tab, in the cases described under "Sign-in".
• storage: keep the GClimb session and the display preference on the device, and whether the panel is open in each tab (cleared when the browser closes).
• Site access (<all_urls>): show the panel on top of whatever store is open, and bring it back after each page load in the tabs where you opened it, or in every tab when it is pinned (except those where you closed it); call the gclimb.io API. Nothing is injected into a tab where the panel is closed, apart from reading the session of a gclimb.io tab as described under "Sign-in".

9. Your rights and contact

You can sign out, clear the extension's data from Chrome's settings or uninstall it at any time. To access, correct or delete your account data, or for any question: contact@gclimb.io. The publisher, service providers, retention periods and your rights are detailed in the general privacy policy.

GClimb general privacy policy: read the policy.