Privacy Policy

What UniCart is

UniCart is a browser extension and web dashboard that lets you save products you're considering from any shopping site into one combined basket, so you can see a running total across stores before deciding what to buy. This policy explains exactly what data that requires, and — just as importantly — what it does not.

Data we collect

• Account email and password. Your password is never stored in plain text — it's hashed with PBKDF2 and a unique per-account salt before it touches our database, so we cannot see or recover your actual password.
• Items you explicitly save. When you click "Add to UniCart" on a product page (or confirm the pop-up prompt), we store that item's title, price, currency, the product page URL, the store's domain, and — if available — a product image URL. We only ever see items you deliberately choose to save.
• Approximate location — only if you allow it. The first time you open the extension, your browser may ask permission to use your location. If you allow it, your device sends its coordinates once to a third-party service (BigDataCloud) solely to guess a starting currency for your basket total. You can decline this prompt, or change the display currency manually at any time — either way, UniCart itself never stores your coordinates.

What we do not collect

• No general browsing history. The extension only activates when you click its button on a page — it does not run in the background reading pages you haven't interacted with.
• No payment card, bank, or financial account details of any kind. UniCart never processes payments and never asks for this information.
• No tracking of purchases you actually complete on a retailer's site. We only know about the price/title you saved at the moment you saved it.
• We do not sell, rent, or share your data with advertisers or data brokers.
• No analytics or advertising trackers are embedded in the extension or website.

Third-party services we rely on

• Cloudflare (Workers, D1 database, Pages) — hosts our backend and stores your account and saved-item data.
• open.er-api.com — provides live currency exchange rates so your basket total can be shown in one currency. No personal or account data is sent to this service; it's a plain, anonymous rate lookup.
• api.bigdatacloud.net — used only if you grant location permission (see above), to convert approximate coordinates into a country/currency suggestion.

Affiliate links

UniCart does not currently participate in any affiliate or referral program, and no affiliate or tracking codes are added to the store links you click. If that ever changes, this policy will be updated first and the change will be clearly disclosed here.

Your data, your control

• You can remove any saved item at any time from the extension popup or the web dashboard — removal takes effect immediately.
• To delete your entire account and all associated data, email us at the address below. (Self-service full account deletion is planned; until then we'll process these requests by hand, promptly.)
• Your free-delivery threshold preferences are stored only in your own browser (extension/local storage) and are never sent to our servers.

Security

All traffic between the extension, the website, and our backend is encrypted over HTTPS. Passwords are hashed with PBKDF2 and a unique salt per account before storage — we never store or transmit your password in plain text.

Children's privacy

UniCart is not directed at children, and we do not knowingly collect data from anyone under 13 (or the relevant minimum age in your country). If you believe a child has provided us with personal data, contact us and we'll remove it.

Changes to this policy

If our data practices change, we'll update this page and revise the "Last updated" date above. Continued use of UniCart after a change means you accept the updated policy.

Contact

Questions about this policy, or requests to access or delete your data, can be sent to ali.j.dahouk@gmail.com.