Privacy Policy

Last updated: October 17, 2026

Rivometry Free MVP 0.2.0 helps users monitor one supported public Shopify competitor per extension installation. This notice describes the extension and its monitoring service.

What Rivometry uses

  • A random pseudonymous installation identifier and separate random access and deletion proofs kept in Chrome extension storage. Applicable proofs are sent to the Rivometry service to establish or verify control of that installation; the server stores domain-separated one-way hashes, not the raw proofs.
  • After you open the popup, the active tab URL is reduced locally to its HTTPS origin/hostname to recognize the storefront. Full URLs, paths, queries, fragments, page contents, cookies and browsing history are not sent for this purpose.
  • The public competitor origin you explicitly track, server-fetched public Shopify catalog snapshots (up to 500 products), scan state, and deterministic meaningful-change evidence.
  • Allowlisted pseudonymous installation, popup/activation, and first-value lifecycle events. Depending on the event, these include extension version, coarse tab type, storefront origin/hostname, and outcome metadata. They exclude full URLs, page contents, email, access/deletion proofs, raw catalogs, and secrets.
  • A transient trusted connection source used for bounded abuse-rate limiting; the application does not place the raw source in product tables.

Why and where

These data provide and secure competitor monitoring, maintain reliability, and measure activation and first value for that single purpose. Cloudflare Workers, Durable Objects and D1 provide the service, scheduled execution, storage and abuse protection. The public extension sends the allowlisted pseudonymous lifecycle events described above to PostHog EU at https://eu.posthog.com. We do not sell this data or use it for advertising, creditworthiness or lending decisions.

Not included in the MVP

Account claim, email alerts, AI interpretation, public billing, Upgrade, and payment flows are not offered by the public MVP.

Retention and your choices

Local values remain until extension storage is cleared or the extension is removed. Removing local values does not delete server-side records. Monitoring records and shared public competitor history may be retained for comparisons; this MVP does not promise a fixed automatic retention expiry or automatic server-side deletion. It does not offer an in-product public deletion control.

For a privacy, access or deletion request, contact [email protected]. Do not email passwords, access/deletion proofs, one-time codes or payment details. Deletion requests require a separate manual assessment and verification of control; contacting support does not itself delete records. Shared public catalog history is not automatically deleted when one installation is removed. We do not promise an unestablished response deadline or deletion outcome.

Limited use and updates

Use and transfer of user data are limited to the disclosed single purpose and related security, reliability and measurement needs, consistent with the Chrome Web Store Limited Use requirements. We will prominently disclose material data-practice changes before collecting data under the changed practice.