Privacy Policy

Effective date: April 1, 2026  ·  Last updated: April 1, 2026

The short version

UNIHODL saves your browsing context so you can resume where you left off. By default, everything stays on your device. We don't sell your data, we don't track your browsing history, and we never will.

Who we are

UNIHODL is operated by Future Enterprises. When this policy says "we", "us", or "UNIHODL" it means Future Enterprises and the UNIHODL product. Contact: privacy@unihodl.app

What we collect and why

Data stored locally on your device (all users)

• Page URL — to reopen the page
• Page title — for display and search
• Scroll position — to restore where you were reading
• Video playback timestamp — to resume at the right point
• Selected text anchor — to find your position if the page reflows
• Page meta description / OG image — for context cards
• Your optional note — only if you type one
• Tags you assign — for organisation
• Extension settings — retention period, preferences

This data is stored in your browser's local storage using the Chrome Storage API. It never leaves your device unless you choose to enable cloud sync (Pro plan).

Data we explicitly do NOT collect

• Form inputs, passwords, or payment card numbers
• Clipboard contents
• Browsing history beyond URLs you actively HODL
• Keystrokes, mouse movements, or interaction patterns
• Page content beyond the meta description
• Data from tabs you haven't captured

Account data (Pro users who create an account)

• Email address — for authentication and account communications
• Plan status — to gate Pro features
• Your HODLs — synced to our Supabase-hosted database for cross-device access

Billing data (paid subscribers)

Payment processing is handled entirely by Stripe. We never see or store your full card number. We receive a Stripe customer ID and subscription status only.

---

How we use your data

• To provide the core HODL capture and resume functionality
• To sync your HODLs across your devices (Pro only, opt-in)
• To verify your subscription status and unlock Pro features
• To send transactional emails (account confirmation, billing receipts)

We do not use your data for advertising. We do not sell it. We do not share it with third parties except as required to operate the service (Supabase for database, Stripe for billing).

Data storage and security

Local data is stored in Chrome's encrypted local storage, protected by your OS and browser. Cloud data (Pro users) is stored in a Supabase PostgreSQL database with row-level security (RLS) — meaning your data is cryptographically scoped to your user ID and inaccessible to other users. All traffic is encrypted via TLS.

Data retention

Local HODLs are automatically deleted after your configured retention period (default: 7 days free, 90 days Pro). You can delete all data at any time from Settings → Data → Delete All HODLs. Cloud data is deleted within 30 days of account deletion upon request.

Your rights

• Access — Export all your data anytime from Settings → Export JSON
• Deletion — Delete all local data from Settings, or email us to delete cloud data
• Portability — Your export is a standard JSON file you can use anywhere
• Correction — Update your account email by contacting us

GDPR users: you are entitled to all rights above. CCPA users: we do not sell your personal information.

Cookies and tracking

The UNIHODL extension does not use cookies. The unihodl.app website uses no analytics cookies and no third-party tracking scripts. The only third-party request is to Google Fonts for typography, which can be blocked without affecting functionality.

Children's privacy

UNIHODL is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal data, contact us at privacy@unihodl.app.

Changes to this policy

We may update this policy as the product evolves. Material changes will be communicated via email to registered users and noted at the top of this page. Continued use after changes constitutes acceptance.