Privacy Policy

Last updated 27 July 2026 · Delta browser extension and delta-diff.vercel.app

The short version

The pages you diff never leave your browser. Delta reads the page, compares it locally, and stores the snapshot on your own machine. No page content, URL, screenshot, or browsing history is ever sent to us.

The only thing that reaches our server is your licence key and an anonymous device identifier, and only when you activate. To sell you a licence we hold your email address.

1. Who we are

Delta is made and operated by Correy Wheatley, British Virgin Islands, who is the data controller for the information described here. Contact: m6ywn5v46f@privaterelay.appleid.com

2. What stays on your device

All of the following is written to your browser's local extension storage and never transmitted:

Uninstalling Delta deletes all of it. We cannot read any of it, and we have no way to recover it for you.

3. When Delta can read a page

Delta uses Chrome's activeTab permission. It has no standing access to the sites you visit — it can only read a page after you click the Delta toolbar icon and press capture on that specific tab. It does not run in the background, does not watch other tabs, and is not present on pages you never point it at.

4. What we receive

When you activate a licence

The extension sends your licence key and the random device identifier to our licence server. That identifier is a random value with no connection to your hardware, browser fingerprint, IP-based identity, or anything else about you. It exists only so we can count how many devices a key is used on.

When you buy

Checkout is handled by Stripe. Your card details go to Stripe, never to us. From the completed payment we store:

5. What we never collect

6. Why we hold what we hold

DataPurposeLegal basis (UK/EU)
Email addressDeliver your key, handle refunds and supportPerformance of a contract
Licence key and payment identifiersVerify purchases, process refunds, keep accountsContract and legal obligation
Device identifierEnforce the three-device limitLegitimate interest

7. Who processes it

ProviderRoleWhat they see
StripePaymentsCard details, email, billing country
SupabaseLicence databaseEmail, licence key, payment identifiers
ResendSending your licence key by emailEmail address, licence key
VercelWebsite and API hostingStandard server request logs

Each maintains its own privacy policy and its own security commitments. We do not sell, rent, or trade your information, and we share it only with these providers or where the law requires it.

8. How long we keep it

Because Delta is a lifetime licence, we keep licence records for as long as the licence exists — otherwise we could not verify your purchase later. Payment records are kept as long as tax and accounting law requires, typically seven years. Ask us to delete your data and we will, except where we are legally required to retain it; deleting your licence record ends your ability to activate on a new device.

9. Your rights

Wherever you live, you may ask us to show you the data we hold about you, correct it, delete it, or send you a copy. If you are in the UK or EU you also have the right to object to or restrict processing, and to complain to your data protection authority. If you are in California you have the right to know what we collect and to ask us to delete it — and we note again that we do not sell personal information.

Email m6ywn5v46f@privaterelay.appleid.com and we will respond within 30 days.

10. Security

Licence data is held in a Postgres database with row-level security enabled and no public read access; it is reachable only by our server using a secret key. Traffic to our site and API is encrypted with TLS. No system is perfectly secure, but the amount of personal data we hold is deliberately small — an email address and a licence key.

11. Children

Delta is a professional development tool and is not directed at children under 13. We do not knowingly collect their data. If you believe a child has given us information, contact us and we will delete it.

12. International transfers

Our providers operate globally, so your data may be processed outside your country, including in the United States. Where required, transfers rely on standard contractual clauses or an equivalent safeguard offered by the provider.

13. Changes

If we change this policy we will update the date at the top of the page. For material changes affecting how we handle your data, we will email licence holders.

14. Contact

Privacy questions or requests: m6ywn5v46f@privaterelay.appleid.com
Data controller: Correy Wheatley, British Virgin Islands