Privacy Policy

1. Introduction

UnfriendPal ("we," "our," or "us") operates the UnfriendPal Chrome extension and web dashboard at unfriendpal.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

2. Information We Collect

Account Information

When you create an account, we collect your email address and a hashed version of your password. We never store your password in plain text.

Friend List Data

When you use the Chrome extension to sync your Facebook friends list, we collect and store:

• Friend names and Facebook profile identifiers
• Friend account status (active, deactivated, etc.)
• Engagement scores calculated by the extension
• Sync timestamps and history

What We Do NOT Collect

• Your Facebook password or login credentials
• Your private messages or conversations
• Your photos, posts, or other Facebook content
• Data from friends who do not use UnfriendPal

3. How We Use Your Information

We use your information to:

• Provide the friend analysis and management features of UnfriendPal
• Display your sync history and engagement analytics in the dashboard
• Process payments and manage your subscription (if applicable)
• Send transactional emails (password resets, account notifications)
• Improve our services and fix bugs

4. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share data with:

• Stripe, for payment processing. Stripe's privacy policy applies to payment data.
• Service providers, including hosting (Neon for database, Vercel for web hosting) who process data on our behalf under strict confidentiality agreements.
• Law enforcement, only when required by applicable law or valid legal process.

5. Data Security

We implement industry-standard security measures including:

• Encrypted connections (HTTPS/TLS) for all data in transit
• Hashed and salted passwords using bcrypt
• JWT-based authentication with secure, httpOnly cookies
• Rate limiting on API endpoints to prevent abuse
• Input validation and sanitization to prevent injection attacks

6. Data Retention and Deletion

We retain your data for as long as your account is active. You can delete all your data at any time from the Settings page in your dashboard. When you delete your account:

• All friend list data and sync history is permanently deleted
• Your account credentials are removed from our database
• Active subscriptions are cancelled

7. Cookies

We use a single session cookie (pal_session) to maintain your logged-in state. This cookie is httpOnly and secure. We do not use tracking cookies or third-party analytics cookies.

8. Chrome Extension Permissions

The UnfriendPal Chrome extension requests only the minimum permissions needed to function:

• Access to facebook.com pages to read your friends list
• Storage permission to cache sync data locally
• Network access to sync data with your UnfriendPal dashboard

9. Children's Privacy

UnfriendPal is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date above.

11. Contact Us

If you have questions about this Privacy Policy or your data, contact us at support@unfriendpal.com.