Privacy Policy

Overview

ConsentScope is a Chrome and Firefox extension that helps you understand what cookies and related tracking signals appear before you consent. This policy describes how we handle data for the ConsentScope website, authentication, and Pro features.

Google Sign-In Data

When you sign in with Google on the ConsentScope website, we access limited Google user data through OAuth 2.0 scopes provided by Google. This integration is used solely for authentication and account creation.

• Data accessed: your Google account email address, name, and Google account ID (sub).
• How we use it: to create and identify your ConsentScope account, authenticate you on the dashboard, and associate your Pro license key or subscription status with your account.
• How we store it: your email and Google account ID are stored securely in our PostgreSQL database. We do not store your Google password or any other sensitive Google credentials.
• How we share it: we do not sell, rent, or share your Google user data with third parties. It is used only by ConsentScope to provide authentication and account services.
• Data retention: Google user data is retained as long as your ConsentScope account exists. You can request account and data deletion by contacting us at support@consentscope.pro.

ConsentScope uses Google Sign-In in compliance with the Google API Services User Data Policy.

Magic Link Sign-In

You can also sign in with a magic link sent to your email address. We use Resend to deliver login emails. We only store your email address for authentication and account association. No password is required or stored.

Cookies on this website

The ConsentScope website may use essential cookies to provide authentication (for example, access to the dashboard) and to protect the service. We also store your cookie banner choice locally in your browser.

Free Extension

In Free mode, scan results are stored locally in your browser. We do not receive your scan data unless you use a Pro feature that requires server-side processing.

Pro Features & Scan Data

When you use Pro features (such as scan history, exports (PDF/JSON/CSV), or privacy policy analysis), the extension sends scan data to the ConsentScope API in order to provide those features.

• Scanned page URL and timestamps (e.g., page load and consent time)
• Detected cookies (names, domains, categories, and timestamps; in some cases values may be included)
• Derived metadata (e.g., violation count, compliance score breakdown, and 3rd-party scripts summary)
• Your license key (used to enable Pro features and associate scans with your account)

Payments

Pro purchases are processed by Stripe. When you complete a purchase on our site, Stripe handles your payment details directly on their PCI-compliant infrastructure. We do not store full credit card numbers or payment credentials on our servers. We receive only the information necessary to deliver Pro access (such as confirmation of purchase, a Stripe customer ID, and subscription/payment status).

Some existing Pro accounts were originally purchased through Gumroad. Gumroad handles those payment details directly, and we do not store them.

Server Logs

Like most online services, our servers may automatically process basic request metadata (such as IP address, device/browser information, and timestamps) for security, rate limiting, and troubleshooting.

Contact

If you have questions or want to request deletion of Pro scan history associated with your license key, contact us at support@consentscope.pro.

Note

This policy does not cover third-party websites you visit or scan. Their data practices are governed by their own policies.