Privacy Policy

Last updated: March 14, 2026

Overview

DiffSpot is a Chrome extension that monitors web pages for changes. Your privacy is important to us. This policy explains what data DiffSpot collects and how it is used.

Data Collection — Local Storage

DiffSpot stores the following data locally in your browser using Chrome's storage API:

• URLs you choose to monitor
• CSS selectors you configure
• Page content snapshots (for comparison purposes)
• Change history records (diff results)
• Your extension settings and preferences

Data Collection — Cloud Features (Paid Plans)

When you sign in and use paid features, additional data is collected and transmitted to our servers:

• Google OAuth — We use Google OAuth for authentication. We receive your email address and basic profile information (name and profile picture) from Google. We do not receive or store your Google password.
• Monitoring jobs — Your monitoring configurations are synced to our cloud servers (Cloudflare Workers) to enable cloud-based monitoring and cross-device sync.
• Payment information — Subscription payments are processed by Stripe. We do not store your credit card details. Stripe may collect information as described in their privacy policy.

Data Storage

Local data is stored in your browser using chrome.storage.local and never leaves your device unless you opt into cloud features by signing in.

Cloud data is stored on Cloudflare's infrastructure. We retain your data for the duration of your account. You may request deletion of your data at any time by contacting us.

Data Sharing

DiffSpot does not:

• Sell your data to third parties
• Use your data for advertising
• Track your general browsing activity

We share data only with the following service providers, solely for the purpose of operating the service:

• Google — Authentication (OAuth)
• Stripe — Payment processing
• Cloudflare — Cloud infrastructure and monitoring

Network Requests

DiffSpot makes HTTP requests to:

• URLs that you explicitly configure for monitoring (directly from your browser or from our cloud servers)
• Google OAuth endpoints (when signing in)
• Stripe API (when managing subscriptions)
• Our API servers on Cloudflare Workers (when using cloud features)

Permissions

DiffSpot requires certain browser permissions to function:

• storage — Save your settings and monitoring data locally
• alarms — Schedule periodic page checks
• notifications — Alert you when changes are detected
• offscreen — Fetch pages without opening visible tabs
• activeTab — Access the current tab for element selection
• contextMenus — Provide right-click "Monitor this page" option
• scripting — Inject the visual element picker
• identity — Authenticate with Google OAuth
• host_permissions (<all_urls>) — Fetch any URL you choose to monitor

Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date.

Contact

If you have questions about this privacy policy, please contact us at support@diffspot.tech.