Extension Privacy Policy

Effective date: January 1, 2025 | Last updated: March 2026

This policy applies specifically to the ZitaVita browser extension (available for Firefox, Chrome, and Edge). It explains exactly what data the extension collects, how it is processed, and how you remain in control at all times.
1. The Core Principle: Opt-In Only

The ZitaVita extension collects absolutely no data until you explicitly enable data sharing in the extension Options page. The extension is installed in a fully passive state. You decide if and when to participate.

You can disable data sharing or uninstall the extension at any time, and all locally stored data can be deleted from the Options page.
2. What We Collect (After You Opt In)

When you have enabled data sharing, the extension observes and records the following:
Page Domains Visited

The domain name of websites you visit (e.g., amazon.com), not the full URL. Query strings and personal identifiers in URLs are stripped before any data is recorded.
Time Spent on Pages

How long you spend on a given domain per visit (in seconds). Visits shorter than 2 seconds are discarded entirely.
Anonymized Search Keywords

Search terms entered on Google, Bing, DuckDuckGo, Yahoo, YouTube, Amazon, eBay, and Walmart. Before recording, any email addresses, phone numbers, Social Security numbers, and credit card numbers are automatically replaced with placeholder tokens ([email], [phone], etc.).
Add-to-Cart Signals

When you click an "Add to Cart" button on a shopping site, the extension records that an add-to-cart action occurred on that domain. No product details, personal information, or full page content is read.
Product Price Ranges

On shopping sites, the extension reads publicly visible product prices from standard metadata (Open Graph tags, Schema.org JSON-LD, and known price element selectors on Amazon, eBay, Walmart, and Best Buy). Prices are categorized into broad ranges (e.g., $25–$50) rather than exact values.
Purchase Completion Signals

The extension detects when a page appears to be an order confirmation page (based on page title and visible text patterns such as "Thank you for your order"). If detected, it records that a purchase occurred on that domain, along with an estimated order total if publicly visible on the page.
3. What We Never Collect

Passwords, login credentials, or authentication tokens
Form field contents (the extension does not read form inputs)
Full page text or page source code
Full URLs including query strings (only domain + path prefix is kept)
Images, videos, or any media on pages you visit
Private browsing / incognito tabs (browser extensions are not active in private windows by default)
Data from sites you have excluded via the Options page
Any data from browser internal pages (about:, moz-extension:, chrome://, etc.)
Any data before you have explicitly enabled data sharing


1. How Data Is Anonymized Before Leaving Your Browser

All data is processed locally in your browser before any information is sent to ZitaVita's servers:

URL stripping: only the origin and path are retained (https://amazon.com/dp/B08N5KWB9H — no query string)
PII removal: emails, phone numbers, SSNs, and credit card numbers are replaced with placeholder tokens in search queries
No personal identifiers: the extension uses a randomly generated UUID (not derived from your device) to identify your session


1. Device Identity

The extension generates a random ID (crypto.randomUUID()) when you first install it and stores it locally. This ID is not derived from any device characteristics — we do not use your browser version, screen size, timezone, hardware, or any other fingerprinting techniques. If you opt out or clear your data from the Options page, this ID is deleted and a new one will be generated if you opt back in.
6. Where Your Data Goes

Anonymized events are sent in batches every 5 minutes to https://zitavita.com (encrypted HTTPS). ZitaVita's servers aggregate data from many users and sell anonymized, aggregated audience segments to buyers on the ZitaVita data marketplace. Individual-level records are never sold. Buyers receive statistical summaries, not raw browsing histories.

ZitaVita does not sell your data to third-party advertisers, data brokers, or any parties outside of the ZitaVita marketplace. Data is not used to serve you targeted advertisements.
7. Your Rights and Controls

Opt out at any time: Toggle data sharing off in the extension Options page
Delete all local data: Use "Clear All Data" in the Options page to erase all stored events, earnings, and your device ID
Exclude specific sites: Add domains to the exclusion list in Options to prevent tracking on those sites
Control tracking categories: Individually enable or disable browsing, search, and shopping tracking
Request account data deletion: Email privacy@zitavita.com to request deletion of your server-side data


1. Data Retention

Local event data is retained on your device for up to 10,000 events and automatically pruned beyond that. Server-side anonymized data is retained for up to 2 years for marketplace purposes. You may request earlier deletion by contacting us at privacy@zitavita.com.
9. Children's Privacy

The ZitaVita extension is not intended for users under 18 years of age. We do not knowingly collect data from minors.
10. Changes to This Policy

If we make material changes to this policy, we will update the effective date above and notify extension users via the Options page. Continued use of the extension after such notice constitutes acceptance of the updated policy.
11. Contact

For questions about this privacy policy or to submit a data deletion request:

Email: privacy@zitavita.com