Privacy Policy for Smox

1. Introduction

Smox ("the Extension") is a free Chrome extension developed by SociiLabs that enables users to take screenshots. We are committed to protecting your privacy and being transparent about how we handle your data.

This Privacy Policy explains:

• What information we collect
• How we use that information
• The permissions we request and why
• Your rights regarding your data
• How to control your privacy settings

2. What We Do NOT Collect

We do not collect, store, or transmit the content of webpages you visit or any information displayed on websites while using the Extension. Screenshots you take and any data on the pages you view are not sent to our servers. Your visual content remains entirely under your control.

3. Information We Collect

3.1 Analytics Data

We use third-party analytics services to understand how the Extension is used, identify technical issues, and improve functionality. These services collect:

• Usage Events: Whether you opened the extension, took a screenshot, or used specific features
• Device & Browser Information: Browser type, operating system, browser version
• General Interaction Patterns: Which features are used most frequently, performance metrics
• Error & Crash Logs: Technical information about crashes or bugs (without webpage content or screenshots)

Third-Party Analytics Providers

We currently use the following third-party services to analyze Extension usage:

1. PostHog — Open-source product analytics. PostHog Privacy Policy. We have a Data Processing Agreement (DPA) in place with PostHog.
2. Google Analytics — Web analytics service by Google. Google Analytics Privacy Policy. We have a Data Processing Agreement (DPA) in place with Google.
3. Microsoft Clarity — Session replay and heatmap service by Microsoft. Microsoft Clarity Privacy Policy. We have a Data Processing Agreement (DPA) in place with Microsoft.

These services may set cookies or use similar tracking technologies. They have their own privacy policies, and we encourage you to review them.

3.2 Local Storage

The Extension uses browser storage to:

• Remember your preferences and settings
• Cache extension data locally on your device
• Store your analytics preferences (opt-in/opt-out status)

This data is stored locally on your device and is not transmitted to SociiLabs servers.

4. Permissions Explained

The Extension requires the following Chrome permissions to function properly:

Future Permissions: We are developing an enhanced screenshot feature that may require expanded website access in a future release. Any new permissions will be requested only when the feature is production-ready, and we will update this policy accordingly.

5. Legal Basis for Data Processing (GDPR)

For users in the European Economic Area (EEA) and other GDPR-applicable jurisdictions:

• Lawful Basis: We process analytics data based on Legitimate Interest (Article 6(1)(f) GDPR)
• Balancing Test: We balance our interest in improving the Extension against your privacy expectations. Since we do not collect webpage content and provide an opt-out mechanism (see Section 6), the legitimate interest test is satisfied
• Data Processing Agreements: We have entered into Data Processing Agreements (DPAs) with all third-party analytics vendors to ensure compliance with GDPR requirements
• Your Rights: You have the right to access, rectify, and request deletion of personal data we may hold. See Section 8 for how to exercise these rights

6. Data Retention & Your Privacy Controls

6.1 Analytics Data Retention

• PostHog: Data is retained according to our configuration (typically up to 12 months)
• Google Analytics: Data is retained for 13 months before automatic deletion
• Microsoft Clarity: Data is retained according to Microsoft's default policies (typically 3+ months)

6.2 Local Storage

User preferences and extension settings are stored indefinitely on your device until you:

• Uninstall the Extension
• Manually clear your Chrome browsing data
• Clear the Extension's storage via Chrome Settings > Extensions > [Smox] > Storage

6.3 Controlling Your Analytics

You can disable analytics collection at any time:

1. Open the Smox extension settings
2. Navigate to Privacy & Analytics
3. Toggle "Send Usage Analytics" to OFF
4. Click Save

You can continue using all core features of the Extension with analytics disabled. Disabling analytics does not require you to uninstall the Extension.

Opting Out at the Vendor Level:

• PostHog Opt-Out
• Google Analytics Opt-Out
• Microsoft Clarity Opt-Out

7. Third-Party Data Sharing

Your data may be shared with and processed by:

1. PostHog — For product analytics and usage insights
2. Google Analytics — For aggregated analytics and performance metrics
3. Microsoft Clarity — For session replay and user behavior analysis

We do not sell your data to third parties. Third-party services may use your data according to their own privacy policies, which we encourage you to review. We have Data Processing Agreements in place with all vendors to ensure compliance with privacy laws including GDPR.

8. Data Security

We implement industry-standard security measures to protect data in transit and at rest:

• HTTPS Encryption: All data transmission to analytics vendors uses encrypted HTTPS connections
• Minimal Data Storage: We do not store sensitive personal information (passwords, payment data, SSN, etc.)
• Chrome Security: The Extension runs within Chrome's security sandbox, which provides automatic protection against malicious code
• Automatic Updates: Chrome automatically updates the Extension with security patches

We recommend keeping your Chrome browser up to date, as Chrome provides automatic security updates to all extensions. If you discover a security vulnerability in Smox, please report it to hello@sociilabs.com.

9. Your Rights and Choices

9.1 General Privacy Controls

You can prevent the Extension from sending analytics data by:

• Disabling analytics in the Extension settings (see Section 6.3)
• Opting out directly with each analytics vendor (PostHog, Google, Microsoft)
• Disabling the Extension in Chrome settings
• Uninstalling the Extension entirely

9.2 GDPR Rights (European Economic Area)

If you are located in the EEA, you have the following rights under GDPR:

• Right to Access (Article 15): You can request a copy of all personal data we hold about you
• Right to Rectification (Article 16): You can request correction of inaccurate personal data
• Right to Erasure (Article 17): You can request deletion of your personal data ("right to be forgotten"), subject to legal exceptions
• Right to Restrict Processing (Article 18): You can request that we limit how we process your data
• Right to Object (Article 21): You can object to processing of your data based on legitimate interest

To exercise any of these rights, contact us at hello@sociilabs.com with your request and any identifying information. We will respond within 30 days.

9.3 CCPA Rights (California Residents)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request what personal information we collect about you
• Right to Delete: You can request deletion of personal information we have collected
• Right to Opt-Out: You can opt out of the "sale" of your personal data (which generally does not apply to this Extension, as we do not sell data)

To exercise these rights, contact us at hello@sociilabs.com. We will respond within 45 days.

9.4 Data Access and Deletion Requests

To request access to, rectification of, or deletion of personal data, please contact:

Email: hello@sociilabs.com
Include in your request: your full name, a description of what data you're requesting, and any identifying information (e.g., email, device ID if known).

We will respond within 30 days (GDPR) or 45 days (CCPA) with confirmation and any requested information.

10. Children's Privacy

Age Requirement: Smox is intended for users 13 years of age and older.

We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will:

1. Delete such information immediately
2. Notify the parent or guardian
3. Cease collection from that user

Parents or guardians who believe their child has provided information to Smox should contact us immediately at hello@sociilabs.com.

Note: In jurisdictions with stricter age requirements (e.g., GDPR applies to children under 16 in some EU countries), we require parental/guardian consent for children under the specified age.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

• Updating the "Last Updated" date at the top of this page
• Posting the updated policy in the Extension
• Sending you an email notification (if we have your email)

Your continued use of the Extension after any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your privacy.

12. Compliance and Legal Basis

This Privacy Policy is designed to align with privacy laws and regulations applicable to our Extension, including:

• GDPR (General Data Protection Regulation): For users in the European Economic Area
• CCPA (California Consumer Privacy Act): For California residents
• Chrome Web Store Developer Program Policies: Requirements for Chrome extensions
• General privacy best practices: Industry-standard data protection principles

Important Disclaimer: While we have designed this Extension and policy to comply with applicable privacy laws, we strongly recommend that you consult with a qualified privacy attorney in your jurisdiction to understand how these laws apply to your specific situation.

13. Cookies and Tracking Technologies

The analytics services we use (PostHog, Google Analytics, Microsoft Clarity) may set cookies or similar tracking technologies to:

• Recognize repeat users
• Track usage patterns
• Measure analytics metrics

You can control cookies through:

• Chrome Settings > Privacy and security > Cookies and other site data
• Disabling analytics in Smox settings (see Section 6.3)
• Opting out with individual analytics vendors (links provided in Section 3.1)

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, or to exercise your privacy rights, please contact: