CancelProof (the "Service") is a Chrome browser extension and website operated by Matan Boker, an individual ("we", "us", or "our"). For any privacy question, contact support@cancelproof.app.
Almost everything CancelProof creates is stored locally in your browser (using your browser's built-in storage) and never leaves your device through us. This includes:
We have no access to this data. If you uninstall the extension or clear your browser storage, this local data is deleted from your device, so we recommend keeping your own backups (see Section 5).
Proof Mode is designed to limit sensitive information in the evidence it captures. When it takes screenshots, it attempts to automatically obscure ("redact") sensitive input fields such as passwords and payment-card fields before the image is saved. This redaction happens on your device. Because websites vary, we cannot guarantee that every sensitive element is caught, so you should review your recordings before sharing them.
The extension requests only the permissions it needs to work, and some are requested only when you choose to use a feature:
| Permission | Why it is used |
|---|---|
| Per-site host access (requested on demand) | To run Proof Mode on a specific site you are cancelling. Requested only when you enable Proof Mode for that site, and removed when the session ends. |
| Screen capture / scripting | To capture screenshots of the visible tab and to place the recording overlay during a Proof Mode session you started. |
| Notifications | To send you reminders before a subscription charge or renewal date. |
| Downloads | To save your PDFs, Refund Packs, and backup files to your device. |
| Storage / sync | To store your data locally and, if you choose, to sync it through your browser account (see Section 5). |
We do not use these permissions to track your browsing, and we do not capture pages except during a Proof Mode session you have explicitly started.
After changes, CancelProof can write a rolling backup file to your device's Downloads folder. This file stays on your device; we do not receive it.
If you are signed in to your browser with a Google account and have browser sync enabled, CancelProof can use your browser's built-in sync so your data is available on your other signed-in devices. In that case the data is synced through Google's Chrome Sync infrastructure under Google's privacy policy — not through our servers, and we cannot read it. You can turn this off in your browser or by disabling sync for the extension.
The main part of CancelProof that involves our servers is licensing and payment. When you buy a paid plan or activate a license, we process:
| Data | Purpose |
|---|---|
| Email address | To issue and recover your license key and to provide support. We receive it from our payment provider at checkout. |
| License key | To identify your purchase and validate that a paid feature is unlocked. |
| Plan, credits, and validity dates | To know what you are entitled to (e.g. a Single Pack credit or an active Pro plan). |
| Payment references | Identifiers from our payment provider that link your purchase to your license. We do not store your card number. |
We do not send your subscriptions, screenshots, or Refund Pack contents to our servers. License validation and credit usage are checked using your license key only.
If you enter your email address in the “get notified at launch” form on our website, we store that email address together with the date and source of your sign-up, so we can send you occasional launch and product updates. You give this to us by ticking a clear, unticked consent box — it is never bundled into any other agreement. You can withdraw your consent and unsubscribe at any time using the link in any email we send, or by emailing support@cancelproof.app, and we will action removal requests promptly. If you never join the waitlist, we never collect this.
Our website (cancelproof.app) uses Cloudflare Web Analytics, a privacy-friendly analytics tool that helps us understand aggregate traffic (such as page views and referring sites). It is cookieless: it does not set cookies, does not store or share any personally identifiable information, and does not track you across other websites. Because we set no tracking or advertising cookies, the site does not require a cookie-consent banner. The only cookies that may be used are strictly necessary ones needed for the site to function.
Payments are handled by Lemon Squeezy, which acts as our Merchant of Record. When you pay, your card details are provided directly to Lemon Squeezy and its payment processors and are processed under Lemon Squeezy's privacy policy. We do not receive or store your full card details. As Merchant of Record, Lemon Squeezy also handles applicable sales tax/VAT and issues your receipt and license key.
We use a small number of third parties strictly to operate the Service: Lemon Squeezy (payments, as Merchant of Record), Cloudflare Web Analytics (cookieless website analytics), a cloud hosting provider for the licensing server, Google's Chrome Sync (only if you enable browser sync, as described above), and an email-forwarding provider for our support address. Each processes data only as needed for these functions.
We do not sell or rent your personal data. We do not show you ads or use your data for advertising. We do not run third-party behavioral tracking, and the only website analytics we use is the cookieless, aggregate tool described above.
Local data remains on your device until you delete it or uninstall the extension. License, billing, and waitlist records are retained for as long as needed to provide the Service and to meet legal, accounting, and tax obligations, after which they are deleted or anonymized.
We take reasonable technical and organizational measures to protect the limited personal data we hold from loss, misuse, and unauthorized access. These include serving all traffic over encrypted HTTPS connections, restricting who can access our systems, keeping the data we collect to the minimum needed, and relying on reputable providers (such as Lemon Squeezy for payments) for functions we do not run ourselves. No method of transmission or storage is completely secure, but we work to protect your information and to address any issues we become aware of.
You control your local data directly — you can view, export, or delete it from within the extension, and uninstalling removes it from your device. For the license and billing data we hold on our servers, you can ask us to access, correct, or delete it by emailing support@cancelproof.app. Depending on where you live, you may have additional rights under applicable data-protection law; we honor mandatory rights that apply to you.
CancelProof is not directed to children. You must be at least 18, or the age of majority where you live, to use the Service. We do not knowingly collect data from children.
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date above and, for material changes, take reasonable steps to let you know.
Questions or requests about your privacy can be sent to support@cancelproof.app.