Privacy Policy

Text Rocket ("we," "our," or "us") operates the Text Rocket Chrome extension and the website at textrocket.app. This Privacy Policy explains how we collect, use, and protect your information when you use our services.

1. Information We Collect

Account Information: When you create an account, we collect your name, email address, and password. Your password is securely hashed using industry-standard algorithms and is never stored in plain text.

Snippet Content: The text snippets you create are stored on our servers so they can be synced between the web dashboard and the Chrome extension. This content is created entirely by you and is only accessible to your account.

Authentication Tokens: We use JWT (JSON Web Tokens) to maintain your login session. These tokens are stored locally in your browser's extension storage and are used solely for authentication.

Technical Data: We collect IP addresses and user agent strings for session management, security monitoring, and rate limiting. This data helps us prevent unauthorized access to your account.

2. Information We Do NOT Collect

• We do not collect or monitor your browsing history.
• We do not log your keystrokes. The extension only detects specific shortcut triggers (ALT+key or Backtick+key) to paste your saved snippets. No keystroke data is transmitted or stored.
• We do not read, collect, or transmit any content from the websites you visit.
• We do not collect your location, health information, financial data, or personal communications.
• We do not track your mouse movements, clicks, or scrolling behavior.

3. How We Use Your Information

• To provide and maintain the Text Rocket service, including syncing snippets between the dashboard and extension.
• To authenticate your identity and secure your account.
• To send transactional emails such as account verification, password resets, and welcome messages.
• To prevent abuse, fraud, and unauthorized access through rate limiting and session management.

4. Data Storage and Security

Your data is stored on secure servers. All communications between the extension, your browser, and our servers are encrypted using HTTPS/TLS. Passwords are hashed using PHP's password_hash() with the bcrypt algorithm. Authentication tokens are signed using secure JWT secrets.

5. Data Sharing

We do not sell, trade, or transfer your personal information to third parties. We do not share your data with advertisers, data brokers, or any other external parties. Your snippet content remains private to your account.

The only exceptions are:

• Payment processors: If you upgrade to a paid plan, your payment is processed by Stripe or Cryptomus. We do not store your credit card information — it is handled entirely by these processors.
• Legal requirements: We may disclose information if required by law or in response to valid legal requests.

6. Chrome Extension Permissions

The Text Rocket extension requests the following permissions, each used for a specific purpose:

• storage: To store authentication tokens and cached snippets locally in your browser.
• activeTab: To insert snippet text into the currently active tab's input fields when you trigger a shortcut.
• tabs: To open multiple URLs (Multi URL Opener) and to read tab URLs for copying (Multi URL Copier).
• alarms: To periodically refresh authentication tokens in the background.
• clipboardWrite/Read: To copy URLs and snippet content to your clipboard when you initiate a copy action.
• Host permissions (all URLs): To run the content script on all websites so shortcut triggers can work everywhere. The script only listens for your configured shortcuts — it does not read or collect page content.

7. Data Retention

Your account data and snippets are retained as long as your account is active. If you delete your account, your data will be permanently removed from our servers. Expired sessions and rate limit records are automatically cleaned up.

8. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Update or correct your account information through the dashboard settings.
• Delete your account and all associated data by contacting our support.
• Export your snippet data.

9. Children's Privacy

Text Rocket is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. Continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

support@textrocket.app