🔒 Privacy Policy

Introduction

This Privacy Policy describes how Undertaker & Autobidder ("we," "us," or "our") collects, uses, stores, and protects information when you use our Chrome extension. We are committed to protecting your privacy and being transparent about our data practices.

Information We Collect

1. Account Information

• Registration Data: When you create an account, we collect your first name, last name, and email address.
• Authentication Credentials: Passwords are securely hashed using SHA-256 encryption before storage. We never store plain-text passwords.

2. Extension Usage Data

• Order Data: Information about orders you interact with on WritersLabs.com, including order IDs, status, and timestamps.
• Bidding Activity: Records of bids placed, bid messages used, and bidding preferences.
• Feature Settings: Your configured preferences such as academic level filters, deadline filters, and notification settings.

3. Technical Data

• Session Information: Authentication tokens and session cookies for maintaining your logged-in state.
• Service Status: Information about which features are running (Undertaker, Autobidder, Confirmation Pending, Telegram).
• Error Logs: Technical error information for debugging purposes (stored locally only).

4. Optional Telegram Data

• Telegram API Credentials: If you enable Telegram integration, your API ID, API Hash, and phone number are stored locally on your device only.
• Session Files: Telegram authentication session files are stored locally and never transmitted to our servers.

How We Use Your Information

Data Type	Purpose
Account Information	User authentication, account management, and admin approval process
Order Data	Order monitoring, automated bidding, and confirmation pending features
Feature Settings	Personalizing your bidding preferences and filter configurations
Session Information	Maintaining authenticated sessions with WritersLabs.com
Service Status	Displaying real-time status and administrative monitoring

Data Storage and Security

Local Storage

The following data is stored locally on your device using Chrome's Storage API:

• User preferences and settings
• Active order lists and history
• Processed order records
• Telegram configuration (if enabled)
• Session tokens

Cloud Storage (Firebase)

The following data is stored in Firebase Firestore:

• User account information (name, email, hashed password)
• Account approval status
• Feature blocking status (admin-controlled)
• Bid message templates
• Admin activity logs

Security Measures

• All passwords are hashed using SHA-256 before storage
• Firebase data is encrypted in transit and at rest
• Telegram credentials are stored locally only, never transmitted to our servers
• Session tokens are securely managed through Firebase Authentication
• The extension only operates on WritersLabs.com domains

Third-Party Services

We use the following third-party services:

Google Firebase

• Firebase Authentication: Secure user authentication and session management
• Cloud Firestore: Database for user accounts and application data
• Firebase services are subject to Google's Privacy Policy

WritersLabs.com

• The extension interacts with WritersLabs.com to provide its core functionality
• We access only the data necessary for order monitoring and bidding
• Your WritersLabs credentials are handled directly by WritersLabs, not stored by our extension

Telegram (Optional)

• If enabled, the extension connects to Telegram's API for order notifications
• Telegram integration runs locally on your device
• Subject to Telegram's Privacy Policy

Data Retention

• Local Data: Retained until you uninstall the extension or clear browser data
• Account Data: Retained while your account is active; deleted upon account deletion request
• Activity Logs: Admin logs retained for 90 days for security purposes
• Order History: Processed order records retained locally for 30 days

Your Rights and Choices

You have the following rights regarding your data:

• Access: Request a copy of the data we store about you
• Correction: Update your account information through the extension
• Deletion: Request deletion of your account and associated data
• Data Portability: Export your data in a readable format
• Withdraw Consent: Uninstall the extension at any time

How to Exercise Your Rights

• Clear Local Data: Go to Settings tab → Click "Clear Storage"
• Uninstall Extension: Right-click the extension icon → Remove from Chrome
• Delete Account: Contact us at the email below

Browser Permissions Explained

Permission	Why We Need It
activeTab	Access the current WritersLabs page to read orders and place bids
cookies	Maintain your authenticated session with WritersLabs
storage	Save your preferences and settings locally
tabs	Open and manage tabs for order monitoring
scripting	Inject scripts to detect orders and submit bids
notifications	Alert you about important events like successful bids
nativeMessaging	Enable optional Telegram integration (local only)

Children's Privacy

Our extension is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

International Data Transfers

Your data may be processed in countries where Google (Firebase) operates data centers. These transfers are protected by Google's security measures and compliance with applicable data protection regulations.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Updating the "Last Updated" date at the top of this policy
• Displaying a notification in the extension (for major changes)

We encourage you to review this policy periodically.

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information (we do not sell data)
• Right to non-discrimination for exercising your rights

GDPR Compliance (EU Users)

For users in the European Union, we comply with the General Data Protection Regulation (GDPR). Our legal basis for processing personal data includes:

• Contract: Processing necessary to provide the extension's services
• Consent: Where you have given explicit consent
• Legitimate Interest: For security and service improvement