JQTable Logo JQTable

Privacy Policy

Last Updated: March 3, 2026

📋 TL;DR Summary: Your JSON data stays 100% in your browser. We collect minimal account data, anonymized usage stats, and technical fingerprints for fraud prevention. We never sell your data.

1. Introduction

JQTable ("we", "our", or "the Extension") respects your privacy. This policy explains in detail what data we collect, why we collect it, and how it's used. We believe in complete transparency about our data practices.

2. Data We DO NOT Collect (Your JSON Data)

✅ Your JSON data remains entirely in your browser. We never see, collect, store, or transmit your JSON data. All JSON processing happens 100% locally on your device. This includes:

  • JSON files you load
  • Query results and filtered data
  • Table visualizations
  • Export data (CSV/JSON)
  • Nested data views

3. Data We Collect (Complete Disclosure)

3.1 Account & Registration Data

Data Type Collected Purpose Retention
Email Address ✓ Collected Account identification, subscription management, support Until account deletion
User ID (randomly generated) ✓ Collected Anonymous account identifier Until account deletion
Subscription Status ✓ Collected Feature access management Until account deletion
Billing Information ✗ Not Collected Processed by LemonSqueezy only N/A

3.2 Device Fingerprinting Data

For fraud prevention, subscription management, and to prevent trial abuse, we collect the following device fingerprint data:

Data Type Collected Purpose
Canvas Fingerprint ✓ Collected Unique device identification (anti-fraud)
WebGL Renderer Info ✓ Collected Device fingerprinting component
IP Address ✓ Collected Geolocation, fraud detection, trial abuse prevention
User Agent ✓ Collected Browser/OS identification
Timezone ✓ Collected Geolocation approximation
Language Preferences ✓ Collected Localization, fingerprinting
Hardware Concurrency (CPU cores) ✓ Collected Device fingerprinting
Device Memory ✓ Collected Device fingerprinting
Screen Resolution ✓ Collected Device fingerprinting
Color Depth ✓ Collected Device fingerprinting
Pixel Ratio ✓ Collected Device fingerprinting

3.3 Usage Analytics

We collect anonymized usage data to improve the Extension:

  • Feature Usage: Which features you use (convert, filter, export, etc.)
  • Performance Metrics: Load times, response times, error rates
  • Error Reports: JavaScript errors, failed operations
  • Query Patterns: Anonymous query structures (not your actual data)
  • Dataset Size Metrics: Anonymous record counts (not actual data)

This data is aggregated and cannot identify you personally.

3.4 Browser Storage (Local Data)

The Extension stores data locally in your browser using Chrome's storage API. This data never leaves your device unless you have Chrome Sync enabled:

  • Saved Queries: Your filter and aggregation queries
  • Saved JSON Datasets: JSON data you explicitly save
  • User Preferences: Theme, filter controls state, settings
  • Subscription Cache: Cached subscription status
  • Last Used JSON: Auto-saved JSON for session recovery

4. How We Collect Data

4.1 Account Registration

When you register via email prompt, we collect your email and generate a unique user ID.

4.2 Device Fingerprinting

We use canvas fingerprinting and collect hardware/software characteristics to create a unique device identifier. This helps us:

  • Prevent trial abuse (multiple accounts from same device)
  • Detect fraudulent subscriptions
  • Secure your account
  • Enforce fair usage limits

4.3 IP Address Collection

We collect your IP address via ipify.org, a third-party service. This is used for:

  • Geolocation (country-level only)
  • Fraud detection
  • Trial abuse prevention
  • Security monitoring

5. Third-Party Services

5.1 LemonSqueezy (Payment Processing)

We use LemonSqueezy for payment processing. When you subscribe:

  • Your payment information goes directly to LemonSqueezy
  • We never see or store your credit card details
  • LemonSqueezy provides us with your subscription status and email
  • LemonSqueezy's privacy policy: https://www.lemonsqueezy.com/privacy

5.2 Supabase (Database)

We use Supabase to store:

  • User accounts and email addresses
  • Subscription status and history
  • Device fingerprints (hashed)
  • Anonymized usage analytics
  • NOT your JSON data

Supabase privacy policy: https://supabase.com/privacy

5.3 Vercel (API Hosting)

Our API is hosted on Vercel. Vercel may collect standard server logs including IP addresses. Vercel privacy policy: https://vercel.com/privacy

5.4 ipify.org (IP Address)

We use ipify.org to retrieve your public IP address. ipify.org privacy policy: https://www.ipify.org/privacy.html

6. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), our legal basis for collecting and using your information depends on the data type:

  • Account Data: Contract performance (to provide Pro features)
  • Device Fingerprint: Legitimate interests (fraud prevention)
  • Usage Analytics: Legitimate interests (improving the service)
  • IP Address: Legitimate interests (security, fraud prevention)

7. Data Security

We implement industry-standard security measures:

  • HTTPS encryption for all API calls
  • Secure Supabase database with access controls
  • No storage of sensitive payment information
  • Regular security audits
  • Data minimization principles
  • Hashed device fingerprints (not stored in plaintext)

8. Your Rights

You have the right to:

  • Access: Request a copy of your data by emailing jqtable@gmail.com
  • Rectification: Correct inaccurate data by contacting support
  • Erasure (Right to be Forgotten): Delete your account and all associated data via the extension
  • Restriction: Limit how we use your data
  • Portability: Receive your data in a structured format
  • Objection: Object to processing based on legitimate interests
  • Withdraw Consent: For any consent-based processing

8.1 How to Delete Your Account

To permanently delete your account and all associated data:

  1. Open the JQTable extension
  2. Click on your subscription status badge (Pro/Free/Trial)
  3. Scroll to "Account Management" section
  4. Click "Delete Account"
  5. Confirm by typing your email address

Important: If you have an active subscription, you must cancel it first before deleting your account.

9. Data Retention and Deletion

9.1 Standard Retention Periods

Data Type Retention Period
Account Information Until account deletion + 30 days (backup)
Device Fingerprints 24 months after last activity
Usage Analytics 36 months (aggregated, anonymized)
IP Address Logs 30 days
Local Browser Storage Until cleared by user

9.2 What We Delete Upon Account Deletion

When you delete your account, the following data is immediately and permanently deleted or anonymized:

✓ Deleted/Anonymized Immediately:

  • Email address (anonymized to deleted_user_XXXXX@deleted.com)
  • Device fingerprints
  • IP addresses
  • Timezone and user agent data
  • Usage analytics tied to your account
  • All locally stored data (queries, JSON datasets, preferences)

9.3 What We Keep (Legal Requirement)

For legal compliance (tax laws, fraud prevention), we retain the following data even after account deletion:

⚖️ Retained for Legal Compliance (7 years):

  • Payment transaction records
  • Subscription invoices and receipts
  • Refund records
  • Tax calculation data
  • Fraud detection logs (anonymized)

Note: These records are anonymized (your email is removed) but kept for tax compliance as required by law in most jurisdictions.

10. Cookies and Tracking

The Extension itself does not use cookies. However:

  • Our API (hosted on Vercel) may use standard HTTP cookies for session management
  • LemonSqueezy checkout uses cookies (see their privacy policy)
  • Device fingerprinting does not use cookies but is a tracking technology

11. Children's Privacy

The Extension is not intended for users under 13 years of age. We do not knowingly collect data from children under 13. If you believe a child has provided us with data, contact us to delete it.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place:

  • Supabase (US/EU) - Standard Contractual Clauses
  • Vercel (Global) - Standard Contractual Clauses
  • LemonSqueezy (Global) - Standard Contractual Clauses

13. Changes to This Privacy Policy

We may update this policy. Changes will be posted here with an updated "Last Updated" date. Material changes will be notified via:

  • Email (if you have a Pro account)
  • Extension notification on next launch
  • Chrome Web Store listing update

14. Contact Information

For privacy questions, data requests, or to exercise your rights:

  • Email: jqtable@gmail.com
  • Response Time: Within 48 hours

15. Complaints

If you believe we have not complied with data protection laws, you have the right to lodge a complaint with your local supervisory authority.


© 2026 JQTable. All rights reserved.