Privacy Policy

1. Data controller

Nikolaj Mokry
Junacka 13
Praha 6, 169 00
Czech Republic
Email: hello@abstigan.com

2. What data we collect

2.1 Account data

If you create a PRO account, we store your email address. This is used solely for authentication — to let you log in to the extension. We do not send marketing emails.

Legal basis: Art. 6(1)(b) GDPR — performance of a contract.

2.2 Usage analytics

The extension sends anonymous usage events to Mixpanel: which filters are active, how many products were scanned per session, and similar in-product metrics. These events are not tied to your identity or your shopping behaviour. No product names, URLs, or cart contents are transmitted.

Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in improving the service.

2.3 Payment data

Payments are processed by Stripe. We never see or store card numbers, bank account details, or billing addresses. Stripe may store this data under their own privacy policy. We receive only a confirmation that a subscription is active or cancelled.

Legal basis: Art. 6(1)(b) GDPR — performance of a contract.

3. What we do NOT collect

• Products you view on grocery sites
• Products you add to your cart
• Shopping history or purchase records
• Browsing history on partner sites or elsewhere
• Location data

The filtering logic runs entirely in your browser. Product data that the extension reads for classification is never sent to our servers.

4. Data processors (sub-processors)

We use the following services to operate Abstigan:

• Supabase — authentication and database, hosted in Frankfurt (EU). Processes your email address. Supabase Privacy Policy
• Stripe — payment processing. Processes payment data under Standard Contractual Clauses for EU data transfers. Stripe Privacy Policy
• Mixpanel — usage analytics. Configured to route data through Mixpanel's EU endpoint. Data processed under SCCs. Mixpanel Privacy Policy

5. Retention periods

• Account email: retained until you delete your account or request deletion.
• Analytics events: rolling 12-month retention in Mixpanel.
• Payment records: retained as required by applicable tax law (typically 7 years).

6. Cookies and local storage

This website does not use tracking cookies. The browser extension uses chrome.storage.local — local device storage — to cache filter settings and ingredient scan results. This data never leaves your device.

7. Your rights under GDPR

If you are in the EU or UK, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — correct inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Restriction — ask us to limit how we process your data
• Portability — receive your data in a machine-readable format
• Objection — object to processing based on legitimate interest

To exercise any of these rights, email hello@abstigan.com. We will respond within 30 days.

8. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. In the Czech Republic: Úřad pro ochranu osobních údajů (ÚOOÚ), www.uoou.cz. In Germany, contact the supervisory authority of your federal state.

9. Changes to this policy

We may update this policy when the service changes. Material changes will be communicated by updating the date at the top. Continued use of the extension after changes constitutes acceptance.