Privacy

Privacy Policy

Last updated: September 22, 2026.

This Privacy Policy explains how Cookie consent (we, us and our) processes information when you use our Chrome extension, cookie-consent.app and the related update, reporting and support services (the Services). Cookie consent is the extension and project name used in this Policy.

At a glance

Your preferences stay in your browser. There are no accounts, payments, advertising trackers or third-party analytics. Page reports are optional and require separate confirmation; their HTML may contain personal data. Our servers process operational request metadata, and the website uses one functional language cookie.

Scope of this Policy

Please read this Policy before using the Services or sending information to us. If you do not agree with these practices, stop using the Services or disable or remove the extension. Using or installing the extension is not consent to upload a page: each report requires an explicit confirmation in its own dialog.

This Policy covers our processing, not the independent practices of websites you visit. The extension operates supported consent forms according to your preferences; it cannot guarantee how those websites subsequently use data or honour your choices.

Our Principles

  • Keep privacy information readable and easy to find.
  • Limit processing to the features, support and security users reasonably expect.
  • Keep processing local where possible and require a clear choice before sending page reports.

Information We Process

We process information in three main ways: locally in your browser to provide extension features; when you deliberately send a report or contact support; and when our website or service receives ordinary network requests. We do not operate an account system, payment service, newsletter, advertising profile or data-broker integration.

Page Processing and Information Stored in Your Browser

The extension can read relevant page content and interact with the page structure on HTTP and HTTPS websites, including accessible frames, to recognise consent controls and apply your choices. Cosmetic cleanup of other pop-ups and overlays is off by default and can be enabled manually. This processing takes place in your browser; page contents and visited addresses are not routinely uploaded to us. The extension does not block network trackers or delete cookies already stored by a website.

Cookie preferences, site exceptions, language, cleanup settings and pause state are stored in the local extension storage of your Chrome profile. They are not synchronised to another profile or computer by the extension. The verified rule cache is also stored locally. If activity recording is enabled, the local activity list keeps up to 200 entries or 30 days, whichever limit is reached first. It records site origins, time, rule identifiers, outcomes, category choices and action counts, not full page paths, URL queries, form values or cookie values. You can turn this recording off and clear it.

Information You Provide Directly

If you email cwsivar@gmail.com, we receive your email address, the message, any attachments and any other information you choose to include. Please do not send passwords, payment details or unrelated sensitive information. We use these communications to respond to your request and provide support. There is no account-registration, purchase, donation or newsletter form in the Services.

Optional Page Reports

A report is captured and sent only after you explicitly agree in the report dialog. It contains the main document’s HTML, page address and title, your optional comment, capture information, extension and catalog versions, interface-language setting, category preferences and relevant technical outcomes or diagnostics. The service also records a report identifier, receipt time, source IP address, browser User-Agent and the version and time of your report agreement. Page addresses and page text can themselves contain personal information.

Before sending, the capture attempts to remove form values, password fields and known token fields. This is not anonymisation: remaining HTML may include personal or sensitive information, including hidden page content. Only send a report if you are comfortable sharing that page. Capture is limited to the main document, not a complete archive of embedded frames or closed shadow roots. HTML capture is capped at 2 MB; the total report payload is limited to 5 MB.

There is no passive HTML collection or persistent upload queue. Temporary capture and retry data are kept in memory rather than as a saved report in browser storage. If a receipt does not arrive, the server may still have received the report. A retry uses the same request identifier to avoid duplicate storage.

Information Received Automatically

The extension periodically requests signed consent-rule updates from our service. These requests are not reports of the websites you visit. Built-in rules remain available if the update service cannot be reached.

Requests to our website, catalog and reporting endpoints expose ordinary connection and request metadata, such as IP address, requested service address or path, time, response status and technical error information. Browser User-Agent information accompanies requests and is stored with page reports. We use operational logs and security controls to run the service, diagnose failures and limit abuse. This is not a cross-site browsing analytics system. We do not request precise location, IMEI, advertising identifiers or a device fingerprint.

Cookies and Similar Technologies

The website uses a first-party functional cookie to remember a language you explicitly select for up to one year. It contains a language code, not a user identifier. Language links also carry the selection in the URL. You can remove or block this cookie using your browser settings; the saved choice may then be lost, while language links can still work.

We do not use advertising cookies, tracking pixels, email-open tracking, embedded social tracking buttons or third-party analytics on this website. Extension local storage is used for the preferences and cache described above. Cookies set by other websites remain subject to those websites’ policies and browser controls.

Information from Third Parties

We do not buy, enrich or combine personal profiles from data brokers, social networks or marketing databases. Consent-rule data obtained from external public catalogs is used to recognise website interfaces, not to build profiles about users. Hosting and communication providers may process information as described below; this does not authorise additional advertising or profiling by us.

How We Use Information

  • Provide the extension’s requested consent and optional cleanup features.
  • Deliver and verify rule updates, investigate voluntarily reported compatibility problems and improve the relevant rules or product behaviour.
  • Respond to support messages and requests concerning your data.
  • Maintain service reliability, prevent abuse and protect users and systems.
  • Comply with applicable legal obligations and address lawful requests or disputes.

We do not sell personal data, use page reports for advertising, or send marketing newsletters. Information from a report may be reviewed to understand and fix the reported problem, including through restricted access by the developer. We do not publish submitted page HTML or make it available to other users.

When We Disclose Information

Service providers: infrastructure, hosting, email or support providers may process information needed to deliver the Services and handle communications. Access should be limited to the relevant purpose. We do not share browsing or report data with advertising networks, promotional partners or data brokers.

Legal compliance and protection: information may be disclosed where required by applicable law, a valid legal process, or where reasonably necessary and lawful to investigate abuse or protect rights and security. Such disclosure is limited to what the circumstances require.

Business transfers: if the project or its assets are transferred, relevant service data may be transferred subject to applicable law and the protections in this Policy. A transfer does not itself authorise unrelated advertising use. We will provide notice of material changes where required.

Consent: we may make another specifically described disclosure if you separately authorise it. There is no routine sharing with affiliated companies or third parties for their own marketing. Operational counts or statistics, where used, do not make the underlying page HTML anonymous or suitable for unrestricted disclosure.

Where applicable data-protection law requires a legal basis, the basis depends on the purpose and circumstances. Processing necessary to provide features you request may relate to providing the Services; limited operational, security and support processing may rely on legitimate interests, subject to your rights and the required balancing. Legal obligations may require particular processing or disclosures.

We require an affirmative choice before collecting and sending a page report. Where processing relies on consent, you may withdraw it for future processing by contacting cwsivar@gmail.com; this does not affect processing that was lawful before withdrawal. Closing a dialog or uninstalling the extension does not automatically delete a report already sent to the service. This Policy is not a request for blanket consent to additional collection or tracking.

Online Analytics and Marketing Communications

We do not use Google Analytics or another third-party usage-analytics service in the current Services. We do not track newsletter opens, run marketing mailing lists or create advertising profiles. Operational request logs and the optional local activity list are separate from advertising or behavioural analytics. If these practices change, this Policy and any necessary disclosures or consent flows must be updated before the change is applied.

Your Choices and Data Subject Rights

You can change cookie preferences, pause processing, disable the extension for a site, leave cosmetic cleanup off, select a language, and turn off or clear local activity in the extension settings. You can disable or remove the extension through Chrome to stop its operation and update checks. Browser settings let you manage local extension data and the website’s language cookie. We cannot remotely edit local-only data in your browser.

Depending on your location and applicable law, you may have rights to access, correct or delete personal data, restrict or object to processing, request portability, or withdraw consent. These rights may be subject to legal exceptions and proportionate identity verification. Contact cwsivar@gmail.com with the nature of your request and, for a submitted report, its report identifier if available. Include only the information needed to locate and handle the request.

You may also complain to the relevant supervisory authority where that right applies. There are no account preferences or marketing subscriptions to manage; support correspondence is not a newsletter.

International Processing and Transfers

Our hosting or communication providers may process information outside your country of residence, where data-protection rules may differ. Where applicable law requires safeguards for an international transfer, those requirements must be followed; using the Services is not blanket consent to disregard them. You can contact cwsivar@gmail.com for information relevant to your request. We do not represent that every country provides identical protection or that a particular transfer mechanism applies in every case.

Security Measures

Safeguards include HTTPS for the public service, authenticated access to report administration, restricted access to stored data and backups, signed rule updates, and handling submitted HTML as data rather than executing it in the administration interface. Redaction and retention limits reduce exposure but cannot eliminate all risk. No Internet transmission, device or storage system can be guaranteed completely secure. Do not send a page report containing information you do not wish to disclose.

Children

The Services are not directed at children, and we do not knowingly request personal data from children under 13 or below a higher age threshold where applicable law requires it. If you believe a child has sent personal information through a report or support message, contact cwsivar@gmail.com. We will take appropriate steps to investigate and remove such information as required by applicable law. We do not use age-based advertising or profiling.

Data Retention

Page reports in the live service database are retained for 30 days and then removed by scheduled cleanup; they may be deleted earlier when appropriate. Local activity is limited to 200 entries or 30 days. Other local preferences and the verified rule cache remain until changed, reset or removed using the extension or browser controls. The website language cookie expires after one year unless renewed by another explicit language selection.

Operational logs are rotated by size rather than kept for a promised fixed number of days. Support communications are retained as needed to handle the request and meet applicable legal obligations. Restricted backup copies may retain data beyond the live report-retention period until those backups are replaced or deleted. Removal from the live database does not instantly erase an existing backup. Backups are for recovery and continuity, not marketing or public access.

Links to the Chrome Web Store, support email or other external resources lead to services governed by their own privacy practices. Websites on which the extension operates also control their own processing and cookies. Cookie consent is not responsible for those independent practices and cannot guarantee that a website honours a consent choice. Review the policies of the third-party services you use. We do not embed social-network tracking plug-ins as part of this website.

Changes to This Privacy Policy

We may update this Policy when the Services or their data practices change. The current version is published here with its last-updated date. Where required, material changes will be accompanied by additional notice or a request for consent. A revised Policy does not replace the separate confirmation required before each page report.

Questions About This Privacy Policy

For privacy questions, support or requests concerning your data, contact Cookie consent at cwsivar@gmail.com. When asking about a page report, include its identifier if available, but do not resend sensitive HTML unless we specifically discuss a safe way to provide the necessary information.