Summary
The Eagle Tools extensions work locally. We do not collect your browsing history, we do not show ads and we do not sell data. Only your account data and what you choose to sync reach our servers.
What stays in your browser
Workspaces, block lists, page cleanup rules, highlights, tracked products, download rules and reading preferences are kept in the extension's local storage (chrome.storage). This data does not leave your computer unless you sign in to an account.
Usage statistics, such as time per site in Eagle Focus and the trackers blocked by Eagle Shield, are calculated and kept in the browser only.
Account data
When you create an account, we store:
- Name and email, to identify the account and send notices about the service.
- Password, stored only as a hash (scrypt), never as plain text.
- Google data, if you sign in with Google: name, email, photo and the Google account identifier. We do not access Gmail, Drive, contacts or any other data.
- Connected devices: an identifier created by the extension, the browser, the operating system and the date of last access, to apply the plan's device limit.
Synced data
With sync turned on, the items of each extension (for example, workspaces and their tabs, Eagle Polish rules or Eagle Scholar highlights) and the extension settings are sent to your account so they are available on your other computers.
Public workspace links show the workspace name, its tabs and the name you choose to display to anyone with the link, until you turn sharing off.
Extension permissions
Each extension asks only for the permissions it needs for what it does. When an extension reads the content of a page, such as Eagle Ease's reader mode or Eagle Deal's price reading, this happens in your browser and the content is not sent to us.
Eagle Deal checks the store page directly to update the price of the products you track. Eagle Shield uses the browser's built-in blocking rules (declarativeNetRequest), which do not require reading the content of requests.
Payments
Subscriptions are processed by a certified payment provider (Stripe). We do not receive or store card numbers; we only receive the subscription status and renewal dates.
Storage and security
Communication between the extensions, the website and our servers uses HTTPS. Sessions use signed tokens with limited validity. Each synced record is tied to your account and can only be read with your session.
Your rights
Under the LGPD (Brazilian Law No. 13,709/2018) and the GDPR, you can access, correct and delete your data. The Delete account option, in My account, immediately removes the account and all synced data, public links and devices. To request a copy of your data, write to the contact below.
Contact
Privacy questions: [email protected]. Data protection officer (DPO): [email protected].