Privacy Policy for ToStatic (Chrome Extension)
Effective Date: August 5, 2026
At ToStatic, we are committed to protecting your privacy. This Privacy Policy outlines the types of information we collect, how we use it, how we protect it, and the choices you have regarding your data when you use the ToStatic Chrome Extension. By installing and using our extension, you agree to the terms of this Privacy Policy.
1. Information We Collect
When you use the ToStatic Chrome Extension, we may collect several types of information to provide and improve our services.
Personal Information: We only collect personal information when you voluntarily provide it. This includes your email address, which is required when you subscribe to a paid plan. We use this to identify your account and manage your subscription.
User Data and Content: We collect and store data related to your use of the extension. This includes basic configuration settings, your subscription status, and information related to the projects and sites you export using ToStatic.
Usage and Technical Information: When you use our extension, we automatically collect certain technical information. This includes a unique, anonymous user ID (userId) generated by Firebase Authentication to identify your session. We also use your IP address to derive your approximate geographical location (e.g., country and city) for analytics purposes. This helps us understand our user base, apply country-specific voucher availability or pricing where offered, and improve our services.
Chrome Storage: We store your userId locally using chrome.storage.sync to ensure your data and settings are consistent and synchronized across your different devices where you are logged into the same Google account.
Traffic and Usage Monitoring Data (Hosting/FUP): For websites hosted or exported using ToStatic's hosting features, we automatically collect data about the site's traffic. This is done via a small, non-cookie-based tracking script we inject into the site's code. The data collected includes the visitor's IP address (used for bandwidth calculation and geo-location), the URL of the exported site where the request originated, the timestamp, and basic request metadata. This data is essential for enforcing our Fair Usage Policy (FUP) and managing server costs.
Free SEO/Performance Assessment Requests: Our website offers a free SEO Analysis and Performance Analysis tool that does not require an account. If you request an emailed report through this tool, we collect the website URL you submit and the email address you provide, solely to run the analysis and deliver the report or a link to claim it into a ToStatic account. We do not verify that the submitted email address belongs to you or that you own the submitted URL; see the "Prohibited Use" and "SEO & Performance Tools" sections of our Terms of Service for your obligations when using this tool.
2. How We Use Your Information
We use the information we collect for the following purposes:
To Provide and Improve the Service: We use your data to operate, maintain, and enhance the features of the ToStatic extension. This includes identifying your account, personalizing your experience, and ensuring your exported sites and settings are accessible.
For Billing and Payments: When you sign up for a paid plan or buy a one-time voucher, we use your account and checkout information with Stripe, our payment processor, to process payment and deliver the selected plan or voucher. Voucher pricing, currency, and credit amounts may vary by country or offer.
For Analytics: We use your location data and a hashed version of your userId to track and analyze usage patterns. This helps us understand how users interact with the extension so we can identify popular features, fix bugs, and improve the user experience.
For Marketing and Promotion: We reserve the right to use information from your projects to showcase the capabilities of ToStatic. We may publicly display project examples, screenshots, or other content from your exported sites on our official website, social media channels, email newsletters, and other marketing materials to promote the extension.
To Manage and Optimize Hosting Services: We use the Traffic and Usage Monitoring Data (including visitor IP and request metadata) to calculate and monitor bandwidth consumption, manage hosting resources, enforce our Fair Usage Policy (FUP), and prevent resource abuse.
For Marketing and Promotion (Public Assets): As detailed in our Terms of Service, we may use and publicly display Website Logos, Favicons, Site Icons, and Site Names/URLs associated with your exported projects in our "Featured Gallery," promotional materials, and case studies to showcase the capabilities of the Service.
3. How We Share Your Information
We do not sell, rent, or share your personal information with third parties except in the following limited circumstances:
Service Providers: We use trusted third-party services to help us operate our business, process data, and provide our hosting services.
Stripe: Your email address is shared with Stripe to manage your subscription and process billing.
Firebase (Google Cloud Platform): Used for core data storage (Firestore Database) and processing.
Brevo: Used to manage email communications, including sharing user email addresses and basic contact details.
Koyeb: Used for API and backend service hosting.
BetterStack: Used for security and error logging, where usage data or log data may be processed for debugging, incident management, and security analysis.
Hosting Providers (e.g., bunny.net, Cloudflare, Netlify, surge.sh): Used to provision and manage hosting services, which may require sharing necessary user information (e.g., domain name, site data) to enable the service. This may, however, not mean any kind of affiliation with these service providers.
Legal Compliance and Protection: We may disclose your information if we are required to do so by law, in response to a subpoena, court order, or other legal processes, or if we believe it is necessary to protect the rights, property, or safety of ToStatic, our users, or the public.
4. Data Storage and Security
Your data is stored securely on servers provided by Firebase (Google Cloud Platform). We implement a range of security measures to protect your information, including access controls and secure data transmission. While we strive to use commercially acceptable means to protect your data, please be aware that no method of transmission over the internet or method of electronic storage is 100% secure.
5. Your Choices and Rights
You have control over your data:
Access and Correction: You can access and update your account information directly within the extension or by contacting us.
Deletion: You may request the deletion of your account and all associated data at any time. To do so, please email us at legal@tostatic.app.
Browser Controls: You can clear extension-related data by using your Chrome browser's extension settings or by clearing your synced Chrome storage.
Opt-Out of Public Asset Use: You may opt out of having your website logos, favicons, or other public assets used in our marketing and "Featured Gallery." To do so, please submit a written request to legal@tostatic.com as detailed in our Terms of Service.
6. Our Rights over data
We reserve the right to following:
Access and Correction: We reserve the right to access and correct/modify your data, whether personal or contextual to enable our systems to work correctly. We ensure your privacy during any such changes though. This is in light of past incidences where users tried to break our system by inputting vague values that started disrupting other users' experiences, so we had to make corrections to the data. Consider this as another layer of sanitisation that we add over data to ensure safety, security and integrity of our systems.
Deletion: We reserve the right to delete any data at any time, with or without notice, if it may hinder proper performance of our systems. If we do not have the means to inform the relevant user, such as, through email, we may inform about such incidences via our social media, but the right to discretion remains with us. You can always reach out to us via our contact channels if you believe your data was deleted.
7. Children's Privacy
Our extension is not intended for or directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information as soon as possible.
8. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the Effective Date. We encourage you to review this policy periodically.
9. Contact Us
If you have any questions or concerns about this Privacy Policy or your data, please contact us at:
privacy@tostatic.com