Privacy Policy Extension

CrxMouse Chrome Gestures Extension: Privacy Policy

This privacy statement (“Privacy Policy”) describes the online information practices which Big Star Labs, LP (“we”, “our”, “us”) employs in relation to the information which we collect from our customer (“you“, “your“) when using the crxMouse Chrome Gestures browser extension (the “Crx Mouse Product”), available on the Chrome Web Store at Link, and associated services (the “Services”). By downloading and using our Crx Mouse Product, or otherwise using the Services, you acknowledge the practices described in this Privacy Policy.

This Privacy Policy forms part of our Terms of Service (available at: [Link) and, to the extent that the processing of personal data is based on consent (see below), is a legally binding agreement between us and you in respect of your use of the Crx Mouse Product and Services.

The data we collect from you allows us to operate effectively and provide you with the best experience in your use of our Services. We respect your privacy and make every effort to provide a service that meets your expectations in terms of privacy. This Privacy Policy presents in a transparent way information about what data we collect from you, how we collect your data, and how we use it. We encourage you to read this Privacy Policy carefully prior to using our Crx Mouse Product and Services, and to use it to make informed decisions.

IF YOU OBJECT TO THE COLLECTION AND USE OF DATA DESCRIBED IN THIS PRIVACY POLICY, WE ASK YOU TO IMMEDIATELY CEASE USING OUR SERVICES AND REMOVE THE CRX MOUSE PRODUCT FROM YOUR BROWSER.

THE INFORMATION WE COLLECT AND HOW IS IT USED
WE DO NOT SHARE ANY OF YOUR PERSONAL INFORMATION, WITH LIMITED EXCEPTIONS
SECURITY & DATA TRANSFER
ENABLING / DISABLING COOKIES
YOUR RIGHTS
OPT OUT
RETENTION OF YOUR INFORMATION
CHANGES TO THIS PRIVACY POLICY
MINORS
FURTHER QUESTIONS?
NOTE RE GOOGLE COMPLIANCE

1. The Information We Collect and How It Is Used

We primarily collect non-identifiable information (“Non-Personal Information“). This information is made available to us via your use of the Crx Mouse Product and Services. We are not aware of, and cannot determine the identity of the users from whom the Non-Personal Information is collected.

We may also collect identifiable information (“Personal Information”), however solely to the extent needed in order to provide and improve our Services, or in the event you choose to contact us, and provide us with such information, for example, if you send us an email and request for support in relation to the installation or use of the Crx Mouse Product, or otherwise the use of the Services.

We have implemented technical measures intended to further secure the data we collect through your use of the Crx Mouse Product and Services, in a manner that the data will be either hashed, trimmed or associated solely to a unique identifier, meaning, an identifier we randomly generated, prior to the data being sent to our servers.

Please see the table below, detailing the types of data we collect and the purpose of collection:

TYPE OF DATA	PURPOSE OF COLLECTION
Internet Protocol (“IP”) address and GUIDWhen you install and use the Crx Mouse Product, we collect your IP address, but we trim it or hash it an on ongoing basis, using common industry practices. In addition, we may assign a unique identifier (known as GUID), which is usually a random number generated by our systems. This unique identifier might be considered Personal Information under applicable law, and we will treat it accordingly.	We use this information based on our legitimate interests in improving the Crx Mouse Product and our Services, given the necessity of such information for the provision of the Crx Mouse Product and our Services and, where permitted under applicable law, based on the consent that you provide by using the Crx Mouse Product.
Technical device related data:When you install and use the Crx Mouse Product, we collect the type of the device in which the Crx Mouse Product was installed, operating system and browsers you are using, standard web server log information (i.e., browser web request) data sent in response to requests, date and time stamp and TabID. This information is stored as Non Personal Information, and cannot be associated with you.
Contact detailsAs stated above, in the event you voluntarily contact us, we will process the data you will choose to provide such as your name and email address.	We will process your contact details and contact history with us, based on our legitimate interests, in order to provide you with the support you have requested or respond to your inquiry. We will retain our contact history and correspondence, in the event we find it applicable (e.g., in the event of future claim, to provide you with support, or to improve our services).

2. We Do Not Share Any of Your Personal Information, With Limited Exceptions

We do not share any of your Personal Information with any of our partners or with any third parties, except for the following limited exceptions:

if we have a good faith belief that disclosure of such information is reasonably necessary to comply with any applicable law or legal process;
to detect and prevent fraud or other security issues;
in the event of a corporate transaction (e.g. sale of a substantial part of our business, merger, consolidation or asset sale).

We may also process your information by our third-party services providers, for the purposes described under this Privacy Policy, that may include our affiliated companies. These services providers are instructed to process the data solely as we request and on our behalf.

3. Security & Data Transfer

As we operate globally, your information may be stored or processed in locations around the world, including but not limited to the United States of America. Transfers of your Personal Information will be made in accordance with applicable data protection laws, and we will take the steps necessary to ensure that international transfers of Personal Information meet all applicable requirements. Specifically, when Personal Information collected within the European Economic Area (“EEA“) is transferred outside the EEA, we will take the steps necessary to ensure that the transfer of such data provides sufficient safeguards, pursuant to standard contractual clauses adopted by the European Union, and you may exercise your rights, where applicable, to receive information on such transfer mechanism.

We further employ security measures to prevent unauthorized access to information that we collect online. Please note that email correspondence with us is in free format text and cannot be encrypted. Accordingly, please do not send any sensitive information via email.

4. Enabling / Disabling Cookies

Our Services may use cookies. Cookies are small text files that are placed on your computer or mobile device by websites or similar digital asset that you visit. They are widely used in order to make web services and products work, or work more efficiently, as well as to provide web services and functionalities for users. For example, they enable you to improve your experience on a website or enable the website to remember your actions and preferences over a period of time, so you don’t have to keep re-entering them whenever you come back to the website or browse from one page to another. More information about cookies is available at www.allaboutcookies.org.

We use the following third-party cookies:

– Google Analytics – used to gather statistical information about how users use our Services, in order to improve the Crx Mouse Product, as well assess its performance, for example, to better understand the number of users who have accessed a certain feature. To learn more about how Google uses data from our use of Google Analytics Cookies see Google’s policies located at: www.google.com/policies/privacy/partners and https://policies.google.com/technologies/partner-sites . We also encourage you to review Google Analytics’ currently available opt-outs for the web tool available at: https://tools.google.com/dlpage/gaoptout/.

– Sentry: used for error tracking in order to monitor and fix crashes. Sentry’s privacy policy is available at: https://sentry.io/privacy/.

Subject to applicable law requirements, we will request your consent prior to enabling processing of Personal Information by third-party cookies. Otherwise, we may base such data collection on our legitimate interests, as we determine necessary for providing and improving our Services.

You can use the settings in your browser to configure whether or not you accept cookies. For your convenience, see the links below for additional information (click on the applicable type of browser you are using): Google Chrome ; FireFox ; Internet Explorer ; Safari ; Edge ; Opera

Please note that some features of our Services may rely upon the use of cookies.

5. Your Rights

Where provided under applicable law (e.g., within the European Union), you may have the right to ask us to delete Personal Information which you have provided to us, subject to applicable exceptions, such as in order to preserve that information for anticipated litigation or demands from a regulator, or some or all of the following rights: the right to obtain information on our use of your Personal Information, the right to obtain a copy thereof, the right to data portability, the right of data rectification, the right to object to processing based on our legitimate interests, the right to restriction of the processing, and the right to withdraw your consent.

In order to assert any of these rights, please contact our Data Protection Officer at: dpo@crxmouse.com. Note that we may request proof of identity, and we reserve the right to charge a fee where allowed by law, such as in circumstances where your request is excessive.

In addition, you may have the right to lodge a complaint with a supervisory authority, subject to applicable law (as is the case in the European Union).

Rights of California Consumers

Residents of California have additional rights related to the Personal Information we collect under the California Consumer Privacy Act (the “CCPA”).

Sections 1 and 2 of this Privacy Policy describe the types of Personal Information we collect, the sources of that Personal Information, and how we use it. Collection and use of your Personal Information may vary slightly depending on our relationship with you.

The CCPA gives California consumers the following rights related to their Personal Information:

the right to request what types of Personal Information we collect, use and/or disclose. Note: we do not disclose Personal Information about you except for the limited exceptions as described in this Privacy Policy.
the right to opt-out of our sale of your Personal Information. The CCPA defines the word “sale” broadly, and various activities (including receiving any type of consideration in exchange for data) may be considered a “sale” under the CCPA. Depending upon the exact circumstances, sharing your data for our marketing purposes (such as with ad tech companies or third-party analytics firms) may qualify as a “sale” under the CCPA. Note: we do not sell Personal Information about you.
Subject to certain exceptions, the right to request the following:
- to delete the Personal Information that has been collected in the past 12 months;
- to receive a copy of the Personal Information that we have collected about you in the past 12 months; and/or
- to receive a description of the source(s) of collection, categories collected, collection purpose(s), methods of handling, sale purpose(s), and the third parties with which your Personal Information was shared.

Requests under the CCPA can be made at no cost to the consumer. Request apply only to the Personal Information collected in the 12 months prior to the request, and no more than 2 requests may be made in any 12-month period.

Only you or a person you have authorized to act on your behalf (and who is registered with the California Secretary of State) may make a request under the CCPA that we can act on. Requests must be sent by e-mail to dpo@crxmouse.com.

We may request you to provide additional information in order to confirm your identity and that you have the authority to make the request before we can act. Therefore, while we will try to limit the information required for your request under the CCPA, we may need additional details in order to verify your request. We need at a minimum enough information to confirm that you are the person about whom the request relates, or are duly-authorized to act on that person’s behalf, and enough details about your request to allow us to understand it and respond to it. Depending on the right you wish to exercise, and the type of data related to your request, without enough information to confirm your identity and what you are requesting, we may need to decline your request.

We try to reply to all confirmed consumer requests within 45 days of receiving them, or as otherwise permissible under applicable law. We will let you know in writing if we need more time to respond (we may need up to 90 days). If we need more time, we will let you know why.

We will not discriminate against you if you exercise your rights under the CCPA. Doing so will not result in the denial of goods or services from us, or in any changes to the pricing or level of quality of goods and services you receive from us.

If you are a California resident who does business with us, in addition to the CCPA California’s “Shine the Light” law (Civil Code Section §1798.83) allows you to request certain details about Personal Information we disclose to third parties for their direct marketing purposes. These requests can only apply to the calendar year immediately before the year in which the request is made, and only one request can be made in any calendar year. Requests under the California Shines the Light law must be sent to dpo@crxmouse.com.

We reserve the right to not respond to requests under either the CCPA or the Shine the Light law if they are submitted via any method other than to dpo@crxmouse.com.

6. Opt out

You may also choose to generally ‘opt-out’ of the automatic collection and sharing of online identifiers and associated device related data described above as follows:

Upon installation of the Crx Mouse Product, you will be directed to an options page where you will need to click on the ‘Disagree’ button. You may also opt out at any point by clicking on the Crx Mouse Product browser icon, and then on the ‘Settings’ icon, or right-clicking on the Crx Mouse Product icon, and selecting ‘Options’. You will then need to uncheck the box next to ‘Turn on Popular Gestures (sends anonymous data)’. Choosing this option means that we will no longer collect the aforesaid data. However, please note that some of our Services may depend upon the collection of certain data, and therefore may not be available to you after you have opted-out.

7. Retention of Your Information

We keep the information we collect from you for as long as needed to provide the Services described in this Privacy Policy and to comply with our legal obligations, resolve disputes and enforce our agreements. If you have any concern about how we collect data while you use the Services, please contact us at: support@crxmouse.com

8. Changes to This Privacy Policy

We reserve the right to revise this Privacy Policy or any part of it from time to time. Please review the Privacy Policy periodically for changes. Unless stated otherwise, our current Privacy Policy applies from time to time to all information that we have about you. The date at the bottom of this Privacy Policy indicates when the most recent changes have been made. Your continued use of our services after the effective date of any update to this Privacy Policy will indicate your acknowledgement of and, where applicable, consent to the updated and amended Privacy Policy.

9. Minors

Children under 16 (or a younger age, as applicable in certain jurisdictions) are prohibited from using our services and Crx Mouse Product. In the event that we become aware that a user under the age of 16 has shared any information with us, we will delete such information immediately. If you have any reason to believe that a child under the age of 16 has shared any information with us, please contact our Data Protection Officer at: dpo@crxmouse.com. If you are under 18, please be sure to read this policy with your parents or legal guardians and ask questions about things you do not understand.

10. Further Questions?

If you have any questions or concerns about this Privacy Policy or how we use your information you may contact us at support@crxmouse.com.

Furthermore, in the event you are an EU or UK resident, you may submit complaints about our handling of Personal Information under the terms of this Privacy Policy to your local data protection supervisory authority.

11. Note re Google Compliance

The use of information received from Google API will adhere to the Chrome Web Store User Data Policy including the Limited Use requirements.

Last Updated: December 31, 2020