Privacy Policy

Effective date: April 10, 2026  ·  Last updated: August 26, 2026

1. Who We Are

RecallRadar ("we," "our," or "the extension") is a Chrome browser extension developed and maintained by RecallRadar (contact: recallradarapp@gmail.com). Our website is recallradarapp.com.

2. Information We Use

Free use does not require a paid account. If you purchase, restore, or activate RecallRadar Pro, we process:

• Email address — to associate a verified Pro subscription and deliver activation or restore messages
• Pro entitlement status — subscription plan, status, renewal/cancellation timing, and limited Stripe customer/subscription references
• Pseudonymous installation ID — a random identifier used to correlate an activated browser installation; it is not a hardware identifier

RecallRadar does not collect browsing history, keystrokes, mouse movements, precise location, or full payment-card details. We do not sell personal data or use Pro data for unrelated advertising or profiling. Network services may process an IP address as technically necessary to deliver and protect requests.

3. What the Extension Reads from Pages

When you visit a supported retailer page (Amazon, Walmart, Target, etc.), RecallRadar reads the product title, brand, and model number visible on that page. This information is used only to form a query to an official government recall database (FDA, USDA FSIS, or CPSC). Recall matching and product checking are separate from Pro entitlement records. Product queries are sent to the applicable recall-data service and are not joined to your Pro email or Stripe subscription by RecallRadar.

4. Local Storage on Your Device

RecallRadar stores the following data locally in your browser using chrome.storage.local:

• Tracked products — product titles you choose to monitor for recall alerts
• Recent check history — titles of the last 10 products you scanned
• Recall result cache — API responses cached for up to 24 hours to reduce redundant requests
• Pro installation and credential data — a random installation ID and scoped activation credential
• Verified Pro status cache — a server-derived entitlement result cached for no more than 24 hours

Tracked products, recent history, and recall-result caches remain local. The activation credential is sent only to RecallRadar's production API to verify Pro status. A legacy local premiumEnabled value is not authoritative and cannot grant Pro. You can clear local data by removing the extension or clearing extension storage in your browser settings.

5. Third-Party Services

RecallRadar makes outbound requests only to the following official government APIs to retrieve recall data:

• FDA — api.fda.gov (food and drug enforcement recalls)
• USDA FSIS — fsis.usda.gov (meat, poultry, and egg recalls)
• CPSC — saferproducts.gov (consumer product safety recalls — Pro plan)
• NHTSA — api.nhtsa.gov (vehicle and equipment recalls — Pro plan)

These requests include the product search query (e.g., product name) but contain no personal information. Each agency's own privacy policy governs how they handle API requests.

Stripe — Pro plan payments are processed by Stripe, Inc. RecallRadar never sees or stores your payment card details. Stripe's privacy policy is available at stripe.com/privacy.

RecallRadar API — verifies signed Pro entitlement and activation requests. It stores the normalized email and limited subscription authority records needed to provide Pro, but does not receive full card details.

Brevo — sends transactional Pro activation and restore email as RecallRadar's email service provider. Brevo receives the destination email address and message content needed for that delivery.

6. Retention and Deletion

Pro entitlement records are retained while needed to provide restoration, subscription status, security, dispute handling, and applicable legal or accounting obligations. One-time activation tokens expire after 15 minutes; the server stores only a token hash. Security and webhook audit records may be retained to prevent replay and investigate delivery or billing problems. To request deletion of eligible Pro information, contact recallradarapp@gmail.com. Some transaction records may need to be retained by RecallRadar or Stripe where legally required.

7. Remote Code

RecallRadar does not load or execute any remotely hosted code. All extension logic is bundled within the extension package distributed through the Chrome Web Store. API calls retrieve data (JSON) only — no scripts are fetched or executed from external sources.

8. Children's Privacy

RecallRadar is not directed to children under the age of 13 and does not knowingly collect any personal information from children. Optional Pro purchase and activation are intended for adults or use with the involvement of a parent or guardian.

9. Changes to This Policy

If we make material changes to this privacy policy, we will update the effective date at the top of this page and, where appropriate, notify users via the Chrome Web Store listing. Continued use of the extension after changes constitutes acceptance of the updated policy.

10. Contact

Questions about this policy? Email us at recallradarapp@gmail.com.