Privacy Policy Extension
CrxMouse Chrome Gestures Extension: Privacy Policy
This privacy statement (“Privacy Policy”) describes the online information practices which Big Star Labs, LP (“we”, “our”, “us”) employs in relation to the information which we collect from our customer (“you”, “your”) when using the crxMouse Chrome Gestures browser extension (the “Crx Mouse Product”), available on the Chrome Web Store here, and associated services (the “Services”). By downloading and using our Crx Mouse Product, or otherwise using the Services, you acknowledge the practices described in this Privacy Policy.
This Privacy Policy forms part of our Terms of Service (available at: https://crxmouse.com/terms/), which governs your use of the Services.
The data we collect from you allows us to operate effectively and provide you with the best experience in your use of our Services. We respect your privacy and make every effort to provide a service that meets your expectations in terms of privacy. This Privacy Policy presents in a transparent way information about what data we collect from you, how we collect your data, and how we use it. We encourage you to read this Privacy Policy carefully prior to using our Crx Mouse Product and Services, and to use it to make informed decisions.
IF YOU OBJECT TO THE COLLECTION AND USE OF DATA DESCRIBED IN THIS PRIVACY POLICY, WE ASK YOU TO IMMEDIATELY CEASE USING OUR SERVICES AND REMOVE THE CRX MOUSE PRODUCT FROM YOUR BROWSER.
- THE INFORMATION WE COLLECT AND HOW IS IT USED
- HOW YOUR DATA MAY BE USED
- SECURITY & DATA TRANSFER
- ENABLING / DISABLING COOKIES
- YOUR RIGHTS
- CALIFORNIA PRIVACY NOTICE
- OPT OUT
- RETENTION OF YOUR INFORMATION
- CHANGES TO THIS PRIVACY POLICY
- MINORS
- FURTHER QUESTIONS?
- GOOGLE COMPLIANCE
- ADDITIONAL PRIVACY INFORMATION FOR OTHER U.S. STATES
1. The Information We Collect and How It Is Used
We primarily collect non-identifiable information (“Non-Personal Information“). This information is made available to us via your use of the Crx Mouse Product and Services. We are not aware of, and cannot determine the identity of the users from whom the Non-Personal Information is collected.
We may also collect identifiable information , meaning, information that could identify a person, individual or consumer, or may that could reasonably identify an individual (“Personal Information”) when you use the Crx Mouse Product and our Services, which we will only process if we have a legal basis for us to do so. Some of this Personal Information, as further explained below, may be considered “Special Categories of Personal Data” asor “Sensitive Personal Information” under applicable privacy laws (collectively, “Sensitive Information”). We do not collect this information in order to draw conclusions about sensitive characteristics of any individual, but because it may be captured incidentally we will ask for your consent before collecting or processing it, if required under applicable law, as we will explain below.
We have implemented technical measures intended to further secure the data we collect through your use of the Crx Mouse Product and Services, in a manner that the data will be either hashed, trimmed or associated solely to a unique identifier, meaning, an identifier we randomly generated, prior to the data being sent to our servers.
Please see the table below, detailing the types of data we collect and the purpose of collection:
| TYPE OF DATA | PURPOSE OF COLLECTION |
| Internet Protocol (“IP”) address and GUID When you install and use the Crx Mouse Product, we collect your IP address, but we trim it or hash it an on ongoing basis, using common industry practices. In addition, we may assign a unique identifier (known as GUID), which is usually a random number generated by our systems. This unique identifier might be considered Personal Information under applicable law, and we will treat it accordingly. | We use this information based on our legitimate interests in improving the Crx Mouse Product and our Services, given the necessity of such information for the provision of the Crx Mouse Product and our Services and, where required under applicable law, based on the consent that you provide by using the Crx Mouse Product. The GUID may also be used alongside some of the other data collected and described herein, by our affiliated companies in connection with their market intelligence services, as further described below and in particular, in the How YourIs the Data May be Disclosed section below. |
| Browsing Activity Data: When you use the Crx Mouse Product, we process the URLs of the webpages, applications and other digital services that you visit and the actions you take on them, including how you navigate and what you click, referral URL and header information showing where you arrived from (“Browsing Activity Data”). Since we process all of the URLs that you visit, some of this information may constitute Sensitive Information. | This data is used to provide and improve our Services. In addition, our affiliated companies, who assist us in providing our Services, will generally filter and aggregate this data so that it cannot be used to identify you or your device, and may then disclose that aggregated data to their business customers. In certain limited cases our affiliates may disclose this information to their business customers in a pseudonymized form, so that those customers can analyse it for market research or consumer behaviour purposes, and our affiliates will do so only where those customers contractually agree not to use the information to identify you. |
SERP Data: When you use the Crx Mouse Product, we process the search queries you submit to search engines and the search engine results pages returned to you, including the URLs and content shown on those results pages (“SERP Data”). Since search queries may relate to any subject, some of this information may constitute Sensitive Information. | This data is used to provide and improve our Services. In addition, our affiliated companies, who assist us in providing our Services, will generally filter and aggregate this data so that it cannot be used to identify you or your device, and may then disclose that aggregated data to their business customers. In certain limited cases our affiliates may disclose this information to their business customers in a pseudonymized form, so that those customers can analyse it for market research or consumer behaviour purposes, and our affiliates will do so only where those customers contractually agree not to use the information to identify you. |
| eCommerce Data: When you use the Crx Mouse Product, we may process data reflecting your activity on e-commerce websites. This can include the items you look at, look up, place in a cart, bookmark for later, or buy, along with related details such as the item’s name and category, its listed price, the retailer or merchant involved, and information about the resulting order or transaction (“eCommerce Data”). BecauseSince the products you shop for can reveal sensitive interests, some of this information may constitute Sensitive Information. | This data is used to provide and improve our Services. In addition, our affiliated companies, who assist us in providing our Services, will generally filter and aggregate this data so that it cannot be used to identify you or your device, and may then disclose that aggregated data to their business customers. In certain limited cases our affiliates may disclose this information to their business customers in a pseudonymized form, so that those customers can analyse it for market research or consumer behaviour purposes, and our affiliates will do so only where those customers contractually agree not to use the information to identify you. |
| AI Conversation Data: When you use the Crx Mouse Product, we may collect and process the AI requests that you make and the AI responses that you receive, including any attachments, uploads and images contained in either (“AI Conversation Data”). Because AI requests and responses may concern any subject, some of this information may constitute Sensitive Information. | This data is used to provide and improve our Services. In addition, our affiliated companies, who assist us in providing our Services, will generally filter and aggregate this data so that it cannot be used to identify you or your device, and may then disclose that aggregated data to their business customers. In certain limited cases our affiliates may disclose this information to their business customers in a pseudonymized form, so that those customers can analyse it for market research or consumer behaviour purposes, and our affiliates will do so only where those customers contractually agree not to use the information to identify you. |
| Advertisement Data: When you use the Crx Mouse Product, we may process information about the advertisements shown to you, including the advertisement’s title, the publisher displaying it and its call-to-action text, together with how you engage with it, including whether it is displayed to you, whether you click on it and whether you dismiss it (“Advertisement Data”). | This data is used to provide and improve our Services. In addition, our affiliated companies, who assist us in providing our Services, will generally filter and aggregate this data so that it cannot be used to identify you or your device, and may then disclose that aggregated data to their business customers. In certain limited cases our affiliates may disclose this information to their business customers so that those customers can analyse it for market research or consumer behaviour purposes, subject to the contractual restrictions described above. |
| Contact details As stated above, in the event you voluntarily contact us, we will process the data you will choose to provide such as your name and email address. | We will process your contact details and contact history with us, based on our legitimate interests, in order to provide you with the support you have requested or respond to your inquiry. We will retain our contact history and correspondence, in the event we find it applicable (e.g., in the event of future claim, to provide you with support, or to improve our services). |
| Google Browsing History Data: When you choose to connect your Google account to enable the Personalized Gestures Setup feature, we access your browsing history for the 30 days prior to connection, as stored by your Google account. This connection is entirely optional and voluntary. We do not access your name, email address, or any other Google account information beyond your browsing history. | We use this information solely to provide you with the Personalized Gestures Setup feature feature and therefore we process this information in order to fulfill our contract with you. Your Google Browsing History Data is not used for any other purpose, including advertising, analytics, or service improvement, and is not shared with any third parties. |
2. How Your Data May Be Used?
WeWe will not disclose your Personal Information to third parties other than in the following circumstances:
- if we have a good faith belief that disclosure of such information is reasonably necessary to comply with any applicable law or legal process;
- to detect and prevent fraud or other security issues;
- in the event of a corporate transaction (e.g. sale of a substantial part of our business, merger, consolidation or asset sale).;
We may also process your information by our third-party services providers, for the purposes described under this Privacy Policy, that may include our affiliated companies. These services providers are instructed to process the data solely as we request and on our behalf.
Our affiliated companies may also use the information disclosed to them to compile and produce analytics and market intelligence, including by studying how people use particular products and digital properties, identifying patterns and trends, measuring product performance, and building and improving features and services. Generally, the data that our affiliates disclose onward to their business customers is aggregated and converted into metrics that do not identify you. In certain limited cases, our affiliates may sell or otherwise disclose the Personal Information described in this Privacy Policy to their business customers, including for those customers to conduct their own analysis of consumer behaviour, to develop new technology, and to train or develop AI models. We make efforts to remove or filter identifiers from the data that we process, but we cannot guarantee that all Personal Information is removed at all times.
You may withdraw your consent for such disclosure at any time as described in the Opt Out section below.
3. Security & Data Transfer
As we operate globally, your information may be stored or processed in locations around the world, including but not limited to the United States of America. Transfers of your Personal Information will be made in accordance with applicable data protection laws, and we will take the steps necessary to ensure that international transfers of Personal Information meet all applicable requirements. Specifically, when Personal Information collected within the European Economic Area (“EEA“) is transferred outside the EEA, we will take the steps necessary to ensure that the transfer of such data provides sufficient safeguards, pursuant to standard contractual clauses adopted by the European Union, and you may exercise your rights, where applicable, to receive information on such transfer mechanism.
We further employ security measures to prevent unauthorized access to information that we collect online. Please note that email correspondence with us is in free format text and cannot be encrypted. Accordingly, please do not send any sensitive information via email.
4. Enabling / Disabling Cookies
Our Services may use cookies. Cookies are small text files that are placed on your computer or mobile device by websites or similar digital assets that you visit. They are widely used in order to make web services and products work, or work more efficiently, as well as to provide web services and functionalities for users. For example, they enable you to improve your experience on a website or enable the website to remember your actions and preferences over a period of time, so you don’t have to keep re-entering them whenever you come back to the website or browse from one page to another. More information about cookies is available at www.allaboutcookies.org.
We use the following third-party cookies:
– Google Analytics – used to gather statistical information about how users use our Services, in order to improve the Crx Mouse Product, as well assess its performance, for example, to better understand the number of users who have accessed a certain feature. To learn more about how Google uses data from our use of Google Analytics Cookies see Google’s policies located at: www.google.com/policies/privacy/partners and https://policies.google.com/technologies/partner-sites . We also encourage you to review Google Analytics’ currently available opt-outs for the web tool available at: https://tools.google.com/dlpage/gaoptout/.
– Sentry: used for error tracking in order to monitor and fix crashes. Sentry’s privacy policy is available at: https://sentry.io/privacy/.
Subject to applicable law requirements, we will request your consent prior to enabling processing of Personal Information by third-party cookies. Otherwise, we may base such data collection on our legitimate interests, as we determine necessary for providing and improving our Services.
You can use the settings in your browser to configure whether or not you accept cookies. For your convenience, see the links below for additional information (click on the applicable type of browser you are using): Google Chrome ; FireFox ; Internet Explorer ; Safari ; Edge ; Opera
Please note that some features of our Services may rely upon the use of cookies.
5. Your Rights
Where provided under applicable law (e.g., within the European Union), you may have the right to ask us to delete Personal Information which you have provided to us, subject to applicable exceptions, such as in order to preserve that information for anticipated litigation or demands from a regulator, or some or all of the following rights: the right to obtain information on our use of your Personal Information, the right to obtain a copy thereof, the right to data portability, the right of data rectification, the right to object to processing based on our legitimate interests, the right to restriction of the processing, and the right to withdraw your consent. Withdrawing your consent will not affect the lawfulness of processing carried out before the withdrawal.
In order to assert any of these rights, please contact our Data Protection Officer at: dpo@crxmouse.com. Note that we may request proof of identity, and we reserve the right to charge a fee where allowed by law, such as in circumstances where your request is excessive.
In addition, you may have the right to lodge a complaint with a supervisory authority, subject to applicable law (as is the case in the European Union).
6. Rights of California Consumers
Residents of California have additional rights related to the Personal Information we collect under the California Consumer Privacy Act (the “CCPA”).
Sections 1 and 2 of this Privacy Policy describe the types of Personal Information we collect, the sources of that Personal Information, and how we use it. Collection and use of your Personal Information may vary slightly depending on our relationship with you.
Categories of Personal Information Collected and Disclosed
| Categories of Personal Information Collected and Disclosed | Categories of Third Parties Disclosed to for a Business or Commercial Purpose |
|---|---|
| Identifiers. Includes online identifiers such as IP address and GUID, and contact information such as name and email address where you provide it to us. | Affiliates and their business customers; advisors and agents; security and fraud prevention providers; others as required by law. |
| Commercial Information. Includes records of products or services purchased, obtained or considered, and other purchasing or use histories or tendencies. | Affiliates and their business customers; advisors and agents; others as required by law. |
| Internet or Other Electronic Network Activity Information. This iIncludes your Browsing Activity Data, SERP Data, eCommerce Data, AI Conversation Data and Advertisement Data, each as defined and described in Section 1 above. | Affiliates and their business customers; advisors and agents; security and fraud prevention providers; others as required by law. |
| Profiles and Inferences. Inferences drawn from any of the information described in this section reflecting preferences, characteristics, behaviours, attitudes, abilities and aptitudes. | Affiliates and their business customers; others as required by law. |
| Sensitive Personal Information. Because we process all of the URLs that you visit, your Browsing Activity Data, SERP Data, eCommerce Data and your AI Conversation Data, this may include visits to sensitive websites or information on sensitive topics, which may relate to religious or philosophical beliefs, consumer health data, or a consumer’s sex life or sexual orientation. | Affiliates and their business customers. |
Sales and Sharing of Personal Information
Under the CCPA, “sharing” means certain disclosures of Personal Information to a third party for cross-context behavioral advertising, and “sale” means disclosing or making available Personal Information to a third party in exchange for monetary or other valuable consideration. Consistent with those definitions, we may sell or share the categories of Personal Information identified in the table above, as further explained in Sections 1 and 2 of this Privacy Policy. We may sell or share those categories to our affiliates, who in turn may sell or share that information with their business customers so that those customers can better understand consumer behaviour, analyse and improve their marketing and advertising campaigns, or train or develop AI models. California residents may exercise the right to opt out of the sale or sharing of their Personal Information as described below.
We do not knowingly sell or share Personal Information about individuals who we know are under sixteen (16) years of age.
The CCPA gives California consumers the following rights related to their Personal Information:
- The right to request what types of Personal Information we collect, use and/or disclose.
- The right to opt-out of our sale of your Personal Information. The CCPA defines the word “sale” broadly, and various activities (including receiving any type of consideration in exchange for data) may be considered a “sale” under the CCPA. Depending upon the exact circumstances, sharing your data for our marketing purposes (such as with ad tech companies or third-party analytics firms) may qualify as a “sale” under the CCPA.
- The right to limit our use and disclosure of your Sensitive Personal Information.
Subject to certain exceptions, the right to request the following:
- To delete the Personal Information that has been collected in the past 12 months;
- To receive a copy of the Personal Information that we have collected about you in the past 12 months; and/or
- To receive a description of the source(s) of collection, categories collected, collection purpose(s), methods of handling, sale purpose(s), and the third parties with which your Personal Information was shared.
Requests under the CCPA can be made at no cost to the consumer. Requests apply only to the Personal Information collected in the 12 months prior to the request, and no more than 2 requests may be made in any 12-month period.
Only you or a person you have authorized to act on your behalf (and who is registered with the California Secretary of State) may make a request under the CCPA that we can act on. Requests must be sent by e-mail to dpo@crxmouse.com.
To exercise your right to opt out of the sale or sharing of your Personal Information, you may withdraw the consent that you provided through the Crx Mouse Product as described in the Opt Out section below, or email us at dpo@crxmouse.com. We will fulfill your request based on the Personal Information in our records that is linked or reasonably linkable to the information provided in your request.
We may request you to provide additional information in order to confirm your identity and that you have the authority to make the request before we can act. Therefore, while we will try to limit the information required for your request under the CCPA, we may need additional details in order to verify your request. We need at a minimum enough information to confirm that you are the person about whom the request relates, or are duly-authorized to act on that person’s behalf, and enough details about your request to allow us to understand it and respond to it. Depending on the right you wish to exercise, and the type of data related to your request, without enough information to confirm your identity and what you are requesting, we may need to decline your request.
We try to reply to all confirmed consumer requests within 45 days of receiving them, or as otherwise permissible under applicable law. We will let you know in writing if we need more time to respond (we may need up to 90 days). If we need more time, we will let you know why.
We will not discriminate against you if you exercise your rights under the CCPA. Doing so will not result in the denial of goods or services from us, or in any changes to the pricing or level of quality of goods and services you receive from us.
If you are a California resident who does business with us, in addition to the CCPA California’s “Shine the Light” law (Civil Code Section §1798.83) allows you to request certain details about Personal Information we disclose to third parties for their direct marketing purposes. These requests can only apply to the calendar year immediately before the year in which the request is made, and only one request can be made in any calendar year. Requests under the California Shines the Light law must be sent to dpo@crxmouse.com.
We reserve the right to not respond to requests under either the CCPA or the Shine the Light law if they are submitted via any method other than to dpo@crxmouse.com.
Sale of Personal Data. We may sell the following categories of personal data: identifiers, commercial information, internet and electronic network activity information, profiles and inferences, and sensitive data as that term is defined under applicable United States privacy laws. We sell those categories to our affiliates, who may then sell them to their business customers so that those customers may conduct their own analysis of consumer behaviour and analyse and improve their marketing and advertising campaigns.
Consumer Rights. Depending on the state in which you reside, you may have the right to confirm whether we process your personal data, to access, correct or delete it, to obtain a portable copy, to opt out of targeted advertising, the sale of personal data and certain profiling, and to appeal a refusal to act on your request. To exercise these rights, contact dpo@crxmouse.com. Where we process sensitive data, we will do so only with your consent.
7. Opt out
You may also choose to generally ‘opt-out’ of the automatic collection and sharing of online identifiers and associated device related data described above as follows:
Upon installation of the Crx Mouse Product, you will be directed to an options page where you will need to click on the ‘Disagree’ button. You may also opt out at any point by clicking on the Crx Mouse Product browser icon, and then on the ‘Settings’ icon, or right-clicking on the Crx Mouse Product icon, and selecting ‘Options’. You will then need to uncheck the box next to ‘Turn on Popular Gestures (sends anonymous data)’. Choosing this option means that we will no longer collect the aforesaid data. However, please note that some of our Services may depend upon the collection of certain data, and therefore may not be available to you after you have opted-out.
If you have connected your Google account to enable the Personalized Gestures Setup feature, you may disconnect your Google account at any time through the Settings. Disconnecting your Google account will disable the Personalized Gestures Setup feature but will not affect your use of any other features of the Crx Mouse Product.
8. Retention of Your Information
We keep the information we collect from you for as long as needed to provide the Services described in this Privacy Policy and to comply with our legal obligations, resolve disputes and enforce our agreements. If you have any concern about how we collect data while you use the Services, please contact us at: support@crxmouse.com
9. Changes to This Privacy Policy
We reserve the right to revise this Privacy Policy or any part of it from time to time. Please review the Privacy Policy periodically for changes. Unless stated otherwise, our current Privacy Policy applies from time to time to all information that we have about you. The date at the bottom of this Privacy Policy indicates when the most recent changes have been made. Your continued use of our services after the effective date of any update to this Privacy Policy will indicate your acknowledgement of and, where applicable, consent to the updated and amended Privacy Policy.
10. Minors
Individuals that are under 16, or who are considered “minors” or a “child” in their applicable jurisdiction are prohibited from using our Services and Crx Mouse Product. In the event that we become aware that a user under the age of 16, a minor or a child has shared any information with us, we will delete such information immediately. If you have any reason to believe that a child, a minor or an individual under the age of 16 has shared any information with us, please contact our Data Protection Officer at: dpo@crxmouse.com. If you are under 18, please be sure to read this policy with your parents or legal guardians and ask questions about things you do not understand.
11. Further Questions?
If you have any questions or concerns about this Privacy Policy or how we use your information you may contact us at support@crxmouse.com.
Furthermore, in the event you are an EU or UK resident, you may submit complaints about our handling of Personal Information under the terms of this Privacy Policy to your local data protection supervisory authority.
12. Google Compliance
The use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements, available at https://developers.google.com/terms/api-services-user-data-policy. Specifically, our use of Google Browsing History Data accessed through Google OAuth is limited solely to providing the Personalized Gestures Setup feature as described in this Privacy Policy. This data will not be used for any other purpose, transferred to third parties, used to serve advertisements, or used to develop, improve, or train generalized AI or ML models.
13. Additional Privacy Information For Other U.S. States
Residents of certain U.S. states, including Colorado, Connecticut, Virginia, Utah, Montana, Oregon, and Texas, may have additional rights under applicable privacy laws and be entitled to additional disclosures.
Sale of Personal Data: We may sell the following categories of Personal Information or Personal Data: Identifiers, commercial information, internet and electronic network activity information, profiles and inferences, and “sensitive data,” as that term is defined under applicable U.S. privacy laws. We sell such categories of Personal Data to our affiliates who then may sell it to their business customers so that they may conduct their own analysis on consumer behaviors and analyze and improve their marketing and advertising campaigns.
Consumer Rights:
Residents of certain U.S. states, including Colorado, Connecticut, Virginia, Washington, Nevada, Montana, Oregon, Texas and Utah, may have additional rights under applicable privacy laws, subject to certain limitations, which may include:
- Access. The right to confirm whether we are processing their Personal Information and to obtain a copy of their Personal Information in a portable and, to the extent technically feasible, readily usable format.
- Delete. The right to delete their Personal Information provided to or obtained by us.
- Correct. The right to correct inaccuracies in their Personal Information, taking into account the nature and purposes of the processing of the personal information.
- Opt-Out. To opt out of certain types of processing, including: (i) to opt out of the “sale” of their Personal Information; (ii) to opt out of targeted advertising by us; and (iii) to opt out of any processing of Personal Information for purposes of making decisions that produce legal or similarly significant effects.
You may submit a request by emailing us as dpo@crxmouse.com. When you submit a request, we will take steps to verify your identity and your request by matching the information provided by you with the information we have on record. In some cases, we may request additional information in order to verify your identity or process your request. We may deny your request if we are unable to verify your and, we will explain the basis for such denial and how you would be able to, where applicable, fix any deficiencies in your request.
To opt out of our “sales”, you can email us at dpo@crxmouse.com or submit a request to opt out of the selling of your Personal Information via our Do not Sell or Share My Personal Information form.
If you are an authorized agent you can submit a request on behalf of another individual by contacting us at dpo@crxmouse.com; you will need to provide proof of your authorization and we may also require that the relevant consumer directly verify your identity and your authority.
Last Updated: August 21, 2026