Privacy Policy

Effective Date: May 1, 2026

This Privacy Policy explains how SurfPal (“SurfPal”, “we”, “us”, or “our”) collects, uses, stores, and protects information when you use the SurfPal website, browser extension, paid features, license services, and related services (collectively, the “Service”).

By using the Service, you agree to the practices described in this Privacy Policy.

1. Overview

SurfPal is designed to help users track website usage time, analyze browser screen time, block distracting websites, create plans, and manage online habits.

We aim to collect only the data needed to provide, maintain, improve, and secure the Service.

The SurfPal browser extension does not read the specific content of webpages you visit and does not modify webpage content.

2. Information We Collect

2.1 Website Analytics Data

When you visit the SurfPal website, we may use Google Analytics to collect website traffic and usage data, such as:

• page views;
• session statistics;
• approximate location;
• browser and device information;
• referral source;
• time spent on pages.

Google Analytics may process this data according to Google’s own terms and privacy policies.

We do not intentionally send personally identifiable information, such as your name, email address, phone number, or payment details, to Google Analytics.

2.2 Browser Extension Data

When you use the SurfPal browser extension, the extension may process information needed to provide, maintain, protect, and improve its features.

This may include:

• browsing activity data related to website usage, such as domains, subdomains, browsing duration, active tab status, and window status;
• extension settings, preferences, rules, plans, and related configuration;
• data generated by your use of the extension, such as analytics records, blocking status, usage summaries, and exported data;
• technical information, such as extension version, browser type, operating system type, language, error logs, and diagnostic information;
• license, activation, and entitlement information if you use paid features.

Most browser extension data is processed and stored locally in your browser, unless you enable synchronization, cloud backup, license verification, or other features that require communication with our servers or third-party services.

2.3 Anonymous or Aggregated Statistics

The SurfPal browser extension may send anonymous or aggregated usage statistics to our servers to help us understand product usage, improve features, detect issues, and maintain the Service.

Such statistics may include information such as feature usage, extension version, browser type, operating system type, language, general error logs, and general usage patterns.

We do not use these statistics to identify individual users.

2.4 License and Payment-Related Information

If you purchase SurfPal Pro or activate a license, we may process information needed to verify and manage your license, such as:

• license key;
• license status;
• activation time;
• device count or activation count;
• payment provider order ID or transaction reference;
• purchase channel.

Payments may be processed by third-party payment providers. We do not store your full payment card information.

2.5 Support Communications

If you contact us for support, we may collect information you choose to provide, such as your email address, message content, screenshots, order screenshots, license key, diagnostic information, or other details needed to respond to your request.

3. Local Data Storage

SurfPal stores most extension data locally in your browser, including browsing duration records, plans, settings, and related configuration.

Local data remains on your device unless:

• you enable data synchronization or cloud backup;
• you export the data manually;
• you share the data with us for support;
• your browser or device syncs extension data through browser-level features outside our control.

You can delete local data by removing the extension, clearing browser storage, or using in-product data management features if available.

4. Data Synchronization and Cloud Backup

If you enable data synchronization or cloud backup, SurfPal may back up and synchronize your extension data through your own Google Drive account.

In this case:

• your data is stored in your Google Drive;
• your use of Google Drive is governed by Google’s own terms and privacy policies;
• we do not control your Google account, Google Drive storage, or Google’s handling of your data;
• you are responsible for maintaining the security of your Google account.

SurfPal uses cloud backup and synchronization only to provide user-facing backup, restore, and multi-device synchronization features.

5. How We Use Information

We use information only for purposes that are reasonably necessary to provide, maintain, protect, and improve the Service.

These purposes may include:

• providing and operating the core features of the Service;
• saving, restoring, and synchronizing your settings and usage data when enabled;
• managing paid features, licenses, purchases, and activation status;
• preventing fraud, abuse, unauthorized access, and license misuse;
• diagnosing bugs, resolving technical issues, and improving performance;
• understanding general usage patterns and improving user experience;
• responding to support requests and user communications;
• complying with applicable laws, regulations, platform policies, and legal obligations.

We do not sell your personal information.

We do not use browser extension data for unrelated advertising purposes.

6. How We Share Information

We may share information only in the following limited circumstances:

6.1 Service Providers

We may share necessary information with service providers that help us operate the Service, such as hosting providers, analytics providers, payment providers, email providers, and cloud infrastructure providers.

These providers may process information only as needed to provide their services to us.

6.2 Third-Party Services You Choose to Use

If you enable features that rely on third-party services, such as Google Drive backup or synchronization, data may be processed by those third-party services according to their own terms and privacy policies.

6.3 Legal and Security Reasons

We may disclose information if we believe it is reasonably necessary to:

• comply with applicable laws, regulations, legal processes, or government requests;
• enforce our Terms of Service;
• detect, prevent, or investigate fraud, abuse, security issues, or license misuse;
• protect the rights, property, or safety of SurfPal, our users, or others.

6.4 Business Transfers

If SurfPal or Mutacore Co., Ltd. is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to appropriate safeguards where required by law.

7. Chrome Web Store Limited Use Disclosure

SurfPal uses data obtained through browser extension permissions only to provide or improve its user-facing features, including website usage time tracking, screen time data analytics, site blocking, plans, intent check, site duration badge, data export, license verification, and data synchronization if enabled.

SurfPal does not use browser extension data for unrelated advertising purposes.

SurfPal does not sell browser extension user data.

SurfPal does not allow humans to read individual user browsing data unless:

• the user explicitly provides the data for support;
• the data is aggregated and anonymized for internal operations;
• it is necessary for security, abuse prevention, or fraud investigation;
• it is required by applicable law.

8. Data Security

We take reasonable technical and organizational measures to protect information against unauthorized access, loss, misuse, alteration, or disclosure.

However, no method of transmission or storage is completely secure. We cannot guarantee absolute security.

You are responsible for keeping your device, browser profile, Google account, license key, and related credentials secure.

9. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Local extension data remains in your browser until you delete it, clear browser storage, uninstall the extension, or use product features to remove it.

License-related records may be retained for as long as necessary to provide license activation, prevent abuse, resolve disputes, and comply with legal or accounting obligations.

Support communications may be retained for a reasonable period to respond to your requests and improve support quality.

10. Your Choices and Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, or object to the processing of your personal information.

You may also:

• uninstall the SurfPal browser extension at any time;
• delete local browser data;
• disable optional cloud backup or data synchronization;
• disconnect third-party services such as Google Drive;
• contact us to request access to, correction of, or deletion of information we hold about you.

To make a privacy-related request, contact us at support@mutacore.com.

We may need to verify your identity before fulfilling certain requests.

11. Children’s Privacy

The Service is not intended for children under the age required by applicable law to use online services without parental consent.

We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, please contact us and we will take appropriate action.

12. International Data Transfers

Depending on your location and the services we use, information may be processed in countries or regions outside your place of residence.

Where required by applicable law, we will take appropriate measures to protect such information.

13. Third-Party Links and Services

The Service may contain links to third-party websites, services, extension stores, payment providers, or cloud services.

We are not responsible for the privacy practices, content, or security of third-party services. Please review their privacy policies before using them.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

If we make material changes, we may provide notice through the Service, our website, email, or other reasonable means.

Your continued use of the Service after the updated Privacy Policy becomes effective means you accept the updated policy.

15. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

support@mutacore.com