Privacy Policy – "Auction Mate" Browser Extension  
Date of Publication: January 7, 2026  
This document outlines the principles of personal data processing and the use of technical information  
by the Auction Mate browser extension (hereinafter: the "Extension").  
In the event of any discrepancies between this version of the Privacy Policy and versions in other  
languages, the provisions of the Polish-language version shall prevail.  
1. Data Controller  
The data controller is a natural person. Contact email: [email protected]  
The controller provides the Extension free of charge as a personal hobby project.  
2. External Authentication  
The Extension uses external authentication (Google or Facebook) for the purpose of creating and  
managing a user account. Within the account, only the e-mail address is stored. Other data transferred  
by the identity provider (first name, last name, profile picture, account identifier) are used only  
transiently and are not stored.  
3. Scope of Data Processing  
3.1. As part of the external login process, identity providers may make the following data  
available:  
•
•
•
•
e-mail address,  
first and last name (if available),  
profile picture (if provided by the User),  
identifier assigned by the identity provider.  
Of the above data, only the e-mail address is stored. The remaining data are used solely for the  
purposes of authentication and are not recorded or retained.  
3.2. During the use of the Extension, the following data may be processed:  
•
•
device IP address,  
randomly generated technical identifier (e.g., UUID) – used locally or for security  
purposes only,  
•
diagnostic data, such as:  
o
o
o
error logs,  
performance information,  
browser and environment version.  
Technical data are processed exclusively to the extent necessary to:  
ensure the security of the Extension,  
•
•
•
detect abuse and attacks,  
diagnose errors.  
3.3. With the User’s prior consent, the Extension may transmit to the server:  
•
•
•
a link to the viewed listing,  
the price of the listing,  
historical price data for the price chart associated with the listing.  
These data:  
•
•
•
•
•
are not linked to the e-mail address,  
are not linked to the IP address,  
are not linked to the UUID,  
are used exclusively for statistical and analytical purposes,  
may be made available to other users solely in a fully anonymized form.  
4. Purposes and Legal Basis for Processing  
Data is processed exclusively for the following purposes:  
•
Operation of the Extension – Art. 6(1)(b) GDPR – applies to data collected during  
authentication (in practice: the e-mail address), which are necessary for user authorization and  
security.  
•
Security and Diagnostics – Art. 6(1)(f) GDPR – legitimate interest – includes the processing  
of IP address, UUID, error logs, and performance data for the purposes of:  
o
o
o
detecting abuse and attempts of external attacks,  
maintaining technical stability of the Extension,  
improving operating quality and eliminating errors.  
•
Anonymous Statistics – Art. 6(1)(a) GDPR – consent – applies exclusively to the  
transmission of listing data (link + price), which:  
o
o
o
are fully anonymous,  
are not attributed to any specific user,  
are  
used  
solely  
for  
market  
analysis  
and  
offer  
population  
analysis.  
Consent is voluntary and may be withdrawn at any time in the Extension settings.  
The data is not used for profiling or marketing purposes.  
5. Data Transfer Outside the EEA  
In connection with the operation of the Extension, data may be processed by cloud service providers  
such as:  
•
Microsoft Azure, which may involve the transfer of data outside the European Economic Area  
(EEA). In such cases, appropriate safeguards are applied in accordance with Article 46 GDPR  
(e.g., standard contractual clauses).  
6. Data Retention Period  
Data are stored only for the period necessary to achieve their processing purpose and are subsequently  
deleted or anonymized:  
•
•
e-mail address – solely for authentication purposes,  
IP address and UUID – up to 60 days.  
After the expiry of the above periods, the data is deleted or permanently anonymized.  
7. Data Recipients  
Data may be processed exclusively by:  
•
•
hosting and infrastructure service providers,  
entities providing technical support and server maintenance.  
Data are not transferred to any third parties for marketing or commercial purposes.  
The Extension does not use any analytical tools (such as Google Analytics, Firebase, Sentry, Hotjar,  
etc.).  
8. User Rights  
You have the right to:  
•
•
•
•
•
•
•
•
access their personal data,  
rectify personal data,  
erase personal data (“right to be forgotten”),  
restrict processing,  
object to processing,  
withdraw consent (applies exclusively to statistical data),  
data portability (to the extent technically feasible),  
lodge a complaint with the President of the Personal Data Protection Office (Poland).  
All requests should be addressed to: [email protected]  
The Controller shall respond within 30 days.  
9. User Age  
The Extension may only be used by individuals who are at least 16 years of age or have the consent of  
a legal guardian.  
10. Security Measures  
The controller implements appropriate technical and organizational measures, including:  
•
•
•
encrypted connections (HTTPS/TLS),  
restricted data access,  
storing only the information necessary for operation,  
•
anonymizing data as quickly as possible.  
11. Cookies and Local Technologies  
Extension does not use  
The  
cookies  
for  
marketing  
or  
advertising  
purposes.  
It uses the browser's local storage (localStorage/sessionStorage) solely to store temporary data required  
for comparison functionality – this is stored locally and not transmitted to any server.  
12. Changes to the Privacy Policy  
This policy may be periodically updated. Changes will be published in the repository or extension store  
from which the Extension was downloaded. Continued use of the Extension after changes are made  
constitutes acceptance of the updated policy.  
13. Contact  
For  
any  
questions  
regarding  
this  
privacy  
policy,  
please  
contact:  
[email protected]