Privacy Policy — Fixlist

Last updated: 2026-09-07

Fixlist — Website Feedback Reports ("the extension") is designed to keep your work on your device. There is no signup and no account: every screenshot, annotation, and report you create stays locally in your browser. It communicates with ExtensionPay and Stripe only for the optional Pro subscription feature described under "Payments" below.

What the extension stores

The extension stores the following locally on your device, using the browser's built-in extension storage and IndexedDB. Your captured website content and reports are not uploaded to us. License-related data is also exchanged with ExtensionPay as described under "Payments":

• Your projects (name, site origin) and issues (title, note, severity, status, the page URL and title, environment info such as browser, OS, window size and language, any console errors recorded during the capture, and the CSS selector of an element you picked)
• Screenshots you capture, together with the annotations you draw on them
• Report settings: the name or business name you choose to show on generated reports, and a count of how many reports you have exported
• Cached Fixlist Pro license status (paid or not, and when it was last checked)
• The date you installed the extension
• ExtensionPay's per-installation API key and cached user data, when available, including the purchaser email, paid status, first payment date, subscription plan, subscription status and cancellation date

For Chrome Web Store disclosure purposes, this means the extension handles:

• Website content: the screenshot, console errors and warnings, and the CSS selector of an element you explicitly choose to capture
• Web history: the URL and title of only the page you explicitly capture; Fixlist does not monitor or store your general browsing history
• User-generated content: project and issue names, issue notes, annotations, severity and status choices, and report settings
• Personally identifiable information: the optional name or business name you choose to show on generated reports, and the purchaser email received and cached by the bundled ExtensionPay library when available
• Financial and payment information: paid status, first payment date and subscription details received and cached by ExtensionPay; this does not include payment-card credentials
• Authentication information: the per-installation API key used by ExtensionPay to identify the installation and check its license

You can export projects, issues, screenshots, annotations and report settings to a JSON file from Settings, and delete projects or issues from the issue list. The JSON backup does not contain ExtensionPay API keys or its cached user data. Uninstalling the extension removes its local data; it does not cancel a subscription or delete records held by ExtensionPay or Stripe.

What the extension does not do

• No analytics, usage tracking, or telemetry of any kind.
• No advertising or analytics cookies, browser fingerprinting, or tracking identifiers. The ExtensionPay API key is used only for license and subscription functionality, not behavioral tracking.
• No selling of data, and no sharing with third parties beyond what the optional Pro subscription itself requires (see "Payments" below).
• No background access to the pages you visit. The extension has no always-on content script and requests no host permissions. It reads a page only in the moment right after you start a capture from the toolbar button (or its keyboard shortcut), and only on that page.

Limited Use

Fixlist's use of information received from Chrome APIs complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. Fixlist uses this information only to provide its user-facing capture, issue-management, backup, and report features. It does not use or transfer the information for advertising, creditworthiness, unrelated analytics, or sale to data brokers, and the developer does not access or read the locally stored content.

Permissions and why they are needed

• storage — saves your projects, issues, and settings on your device.
• activeTab — grants temporary access to the current tab, only when you start a capture from the toolbar button or its shortcut.
• scripting — briefly runs the code that takes the screenshot, reads the page's size and console errors, and powers the area/element picker. It runs only as part of a capture you started.
• unlimitedStorage — lets your screenshot history grow without hitting the browser's default storage limit. The data stays on your device.

Payments

Capturing, annotating, organizing issues into projects, and JSON backup are free forever. Each user gets three free distinct PDF report exports; after that, unlimited PDF report exports require the optional Fixlist Pro subscription ($5/month). Re-exporting the same unchanged selection, or creating both available PDF types for it, does not use another free export.

Payments and subscription status are handled by ExtensionPay, a third-party payment service for browser extensions, together with its payment processor Stripe. To check whether you have an active Pro subscription, the extension contacts extensionpay.com when you open Fixlist's Settings page (options.html) and the locally cached status has expired (at least every 5 minutes if you are not a subscriber, and at least every 12 hours if you are) — not only when you open a payment page yourself. ExtensionPay may process the email address used to purchase or restore access and the associated license/subscription status. Its privacy policy governs that processing.

The bundled ExtensionPay library creates a per-installation API key when its payment/access flow needs one, stores it in extension storage, and transmits it to ExtensionPay over HTTPS for license checks and payment/access flows. It also caches the user information returned by ExtensionPay locally. When available, this includes the purchaser email, paid status, first payment date, subscription plan, subscription status and cancellation date. These records are used to provide and manage Pro access, not for advertising or analytics. Fixlist does not collect passwords from websites you capture.

Card and billing details are entered on Stripe-hosted pages and processed by Stripe. We never receive or store your card number or other payment-card credentials. Your locally stored projects, issues, screenshots, and annotations are not sent to ExtensionPay or Stripe.

Children

The extension is a professional tool and is not directed at children.

Contact

Questions about this policy: yocchan.business+fixlist@gmail.com

Changes

If this policy changes, the "Last updated" date above will change with it.