Privacy Policy for IndieShuffle Chrome Extension
Last Updated: January 20, 2026
Introduction
IndieShuffle ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use the IndieShuffle Chrome Extension ("the Extension").
Information We Collect
1. Subscription Information (Optional)
- Email Address: Collected only when you choose to sign in for Premium subscription management
- Payment Information: Processed securely through Stripe (we do not store credit card details)
- Subscription Status: Whether you have an active Premium subscription
2. Usage Data
- Client ID: A unique identifier generated by the Extension for tracking subscription status
- User Preferences: Settings you configure in the Extension (e.g., track sources, display preferences)
- Track History: Tracks you've viewed (stored locally in your browser)
3. Technical Data
- Browser Information: Chrome browser version and extension version
- Extension Usage: Basic usage statistics (stored locally)
How We Use Your Information
Subscription Management
- Verify your Premium subscription status
- Process payments through Stripe
- Manage your subscription account
Service Improvement
- Improve Extension functionality
- Fix bugs and technical issues
- Enhance user experience
Communication
- Send subscription-related notifications (if applicable)
- Respond to support requests
Data Storage
Local Storage (Your Browser)
- User preferences and settings
- Track history and viewed tracks
- Client ID (unique identifier)
- Cached subscription status
Location: Stored locally in Chrome's storage (not transmitted to our servers)
Server Storage (Railway Backend)
- Email address (only if you sign in)
- Subscription status
- Client ID (for subscription verification)
Location: Railway cloud servers (indieshuffle-production.up.railway.app)
Third-Party Services
Stripe
- Purpose: Payment processing for Premium subscriptions
- Data Shared: Email address, payment information (handled securely by Stripe)
- Privacy Policy: https://stripe.com/privacy
Railway
- Purpose: Backend server hosting for subscription verification
- Data Shared: Email address, subscription status
- Privacy Policy: https://railway.app/privacy
Music Sources
The Extension fetches track information from:
- Reddit (reddit.com)
- Hype Machine (hypem.com)
- Indie Shuffle (indieshuffle.com)
- SubmitHub (submithub.com)
Note: We do not share your data with these sources. We only fetch publicly available track information.
Affiliate Advertising
- Purpose: The Extension displays sponsored affiliate advertisements to support the service
- Data Collection: We do not collect personal information from ad displays or clicks
- Ad Partners: Affiliate links may redirect to third-party merchants (e.g., AliExpress)
- User Control: Ads are clearly labeled as "Sponsored" and clicking is optional
- Privacy: Clicking on affiliate ads redirects you to third-party websites. We do not track which ads you click or share your information with ad partners
Data Security
We implement appropriate security measures to protect your information:
- Encryption: All data transmission uses HTTPS
- Secure Storage: Subscription data stored securely on Railway servers
- Payment Security: Payment processing handled by Stripe (PCI DSS compliant)
- No Credit Card Storage: We never store or have access to your credit card details
Your Rights
You have the right to:
- Access: Request access to your personal data
- Deletion: Request deletion of your data
- Correction: Correct inaccurate information
- Opt-Out: Stop using the Extension at any time
To exercise these rights, contact us at: info@orionventuresltd.com
Data Retention
- Subscription Data: Retained while your subscription is active and for 30 days after cancellation
- Local Storage: Stored in your browser until you uninstall the Extension or clear browser data
- Server Data: Deleted within 30 days of subscription cancellation
Children's Privacy
The Extension is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by:
- Updating the "Last Updated" date
- Posting the new Privacy Policy in the Extension
- Notifying users via the Extension (for significant changes)
Summary
What we collect:
- Email (only if you sign in for Premium)
- Subscription status
- User preferences (stored locally)
What we DON'T collect:
- Credit card numbers (handled by Stripe)
- Browsing history outside the Extension
- Personal information beyond what's necessary for subscriptions
Where data is stored:
- Locally in your browser (preferences, track history)
- Railway servers (subscription status, email if signed in)
Third parties:
- Stripe (payments)
- Railway (backend hosting)
- Music sources (public track data only)
- Affiliate ad partners (ad display only, no data sharing)
Your control:
- You can uninstall the Extension at any time
- You can cancel your subscription at any time
- You can request data deletion by contacting us