Nilkick extension — Privacy policy

What the extension accesses

• Your Nilkick sign-in session. When you click “Connect”, the extension receives your existing Nilkick session from the nilkick.com connect page and stores it locally (in the browser's extension storage) so you stay signed in. It is used only to authenticate requests to Nilkick and to refresh your access token with our authentication provider (Supabase).
• Your own launch-plan content. Using that session, the extension reads the projects, venues, drafted posts, and task statuses that belong to your account, and writes back when you mark a task done, skip it, or edit a draft. Everything is scoped to you by our database's row-level security.
• Your account email is shown in the panel (“signed in as …”) — it's your own.

What it does NOT do

• It does not collect analytics, telemetry, or your browsing history.
• It does not read, modify, or track the content of any third-party website. It has no access to any site other than nilkick.com (its own pages and API) and our authentication provider.
• It does not post or submit anything on your behalf — you always review and submit yourself.
• It does not sell, rent, or share your data with anyone, and never uses it for advertising.

Where data is stored & sent

Your session token and small UI state live in your browser's local extension storage on your own device. Network requests go only to nilkick.com (your plan and task updates) and to our authentication provider (*.supabase.co, to keep your session valid). No data is sent anywhere else, and no remote code is loaded.

Your control & deletion

Disconnecting or uninstalling the extension clears its locally stored session. Your launch data is part of your Nilkick account and is managed there; to delete it, manage or close your account at nilkick.com.

Contact

Questions about this policy? Email hello@nilkick.com.