Privacy Policy
Last updated: 14 October 2026
This policy explains what the SubRadar Chrome extension and website ("SubRadar", "we", "us") collect, why, and what you can do about it. SubRadar is operated by YOUR LEGAL NAME / BUSINESS NAME, YOUR ADDRESS, India.
What we collect
| Data | Why |
|---|---|
| Email address and password | To create and sign in to your account. Passwords are stored hashed by our authentication provider; we never see them in plain text. |
| Subscriptions you save: service name, price, currency, billing cycle, start date, category, and an optional note | To show your spending, totals and upcoming renewals. Only what you choose to save is stored. |
| Subscriptions SubRadar found for you (service name, price, billing cycle, dates and a short description of where it was found), until you add or dismiss them | To let you review what "Find my subscriptions" found. You can dismiss any of them. |
| If you connect Gmail: your Gmail address and an encrypted access token | To read subscription receipts when you ask for a scan. Disconnecting deletes the token and revokes access at Google. |
| Your preferred display currency and reminder settings | To show totals in the currency you pick, and to know whether and how many days before a renewal to remind you. |
| Pro payment records: payment provider, payment ID, amount, currency, date | To activate Pro, prevent duplicate charges and handle refunds. We do not receive or store card numbers, UPI IDs or bank details. |
Find my subscriptions
- Statement upload: the file you upload is sent over HTTPS to our server, read in memory to find recurring charges, and discarded straight away. The file, its other transactions and any PDF password are never stored or logged. Only the subscriptions found are saved.
- Gmail (optional): with your permission, SubRadar gets read-only access to your Gmail (Google's
gmail.readonlyscope). It only searches for receipts and renewal emails from subscription services in the last 13 months, reads them on our server to find the service, price and dates, and discards the email content. It never sends, changes or deletes email. SubRadar's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. - Forwarded receipts: emails you forward to your private SubRadar address are read the same way and discarded; only what's found is saved.
- Nothing found is added to your subscriptions until you choose Add.
What the extension reads on web pages
To offer "Did you just subscribe?" at the right moment, the extension checks the address of pages you visit for checkout and payment patterns (for example /checkout), and looks for payment forms on the page. When you open the add form, it reads the visible page text on your device to pre-fill the service name and price.
- Page addresses and page content are not sent to us or stored anywhere.
- Nothing leaves your device until you press Save, and then only the fields shown in the form.
- Sites where you choose "Don't ask on this site" are remembered in your browser's local storage only.
- Find my subscriptions (optional): only when you click Scan, and only after you allow it in Chrome's permission prompt, the extension reads your Chrome history from the last 6 months on your device and looks for about 40 known subscription services. Your history is never uploaded or stored. The extension removes its history permission as soon as the scan ends.
- Unused-subscription alerts (optional, off by default): if you turn these on, the extension keeps its history permission and once a week checks, on your device, whether you've opened each subscribed service in the last 30 days. Your history is never uploaded.
- For renewal reminders, the extension checks your saved subscriptions every few hours and shows a Chrome notification. Which reminders were already shown is remembered in your browser only.
- The web app keeps you signed in by storing your login session in your browser's local storage. Signing out removes it. We don't use advertising or tracking cookies.
Who processes your data
- Supabase hosts our database, sign-in and the server that reads statements and receipts (servers in Tokyo, Japan).
- Google, if you connect Gmail, under Google's own privacy policy.
- Razorpay processes Pro payments. When you pay, you share payment details directly with Razorpay under its own privacy policy.
We do not sell your data, share it with advertisers, or use it for advertising. There are no ads or third-party trackers in the extension.
Chrome Web Store User Data Policy
The use of information received from the Chrome extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Data is used only to provide SubRadar's features to you.
How long we keep it
Your subscriptions are kept while your account exists. You can delete any subscription at any time in the extension. Payment records are kept for as long as required by Indian tax and accounting law.
Your rights
Under India's Digital Personal Data Protection Act, 2023 and similar laws, you can ask to access, correct or delete your personal data, or withdraw consent. To delete your account and all its data, email SUPPORT EMAIL from the address you signed up with. We'll do it within 30 days.
Security
All data is sent over HTTPS. Database rules ensure each account can only read and change its own subscriptions.
Children
SubRadar is not intended for children under 18 and we don't knowingly collect their data.
Changes
If we change this policy, we'll update the date above and, for significant changes, tell you in the extension.
Contact / Grievance officer
YOUR NAME
Email: SUPPORT EMAIL
Address: YOUR ADDRESS