Privacy Policy — RoPA Pilot

Last updated: 2026-07-02

RoPA Pilot is a GDPR compliance tool. It is built so that your data never leaves your browser — that is the product's core design, not a marketing line.

What the extension processes locally

• Detected tools — when a tab finishes loading, the extension compares the tab's domain name (hostname) in memory against its built-in catalog of known SaaS tools. If the domain matches a known tool, only the tool's identifier and dated counters are stored locally. Full URLs are never stored. Page content is never read (the extension contains no content script). Domains that are not known SaaS tools leave no trace.
• Your register — organizations, processing records, DPA tracking and settings are stored locally using the browser's chrome.storage API.
• Exports (CSV, JSON, printable register, privacy notices) are generated locally in your browser and saved to your device.

None of the above is transmitted anywhere.

The only network call: license check (Pro)

• License key — an opaque, randomly generated identifier (UUID) created on your device. It is sent to our licensing backend (https://ropapilot.leandro-sierra.com) only to check whether a Pro subscription is active. It is not linked to your identity by the extension and contains no personal data.

We do not collect: your name, email, address, browsing history, page content, or any personally identifiable information.

What we do NOT do

• We do not sell or rent any data — there is nothing to sell.
• We do not use advertising or analytics trackers inside the extension.
• We do not read or inject anything into web pages (no content scripts, no host_permissions).

Payments

Pro subscriptions are processed by Stripe. Payment details are entered on Stripe's hosted checkout and handled entirely by Stripe — the extension never sees or stores them. See Stripe's privacy policy for how they process payment data.

Data location & retention

• Local data (chrome.storage) lives on your device. You can clear detection history from the settings page at any time; uninstalling the extension removes everything.
• The licensing backend stores only the license key and its subscription status (Stripe customer/subscription identifiers), hosted in the EU (Germany).

Your choices

• Clear detection history: Settings → Local data → "Clear detection history".
• Delete everything: uninstall the extension.
• Cancel a Pro subscription: use the Stripe-hosted portal from your checkout confirmation email, or contact us.

Contact

Questions about privacy: contact@leandro-sierra.com