Privacy Policy – IlbonVPN Extension

📋 1. Overview

This Privacy Policy describes how the IlbonVPN Extension ("Extension", "we", "our") handles user data. This Extension is a Chrome browser extension that allows authenticated users to connect to a private HTTP proxy server using their account credentials.

We are committed to protecting your privacy. This policy explains exactly what data is collected, why it is collected, and how it is handled.

📦 2. Data We Collect

We collect only the minimum data necessary to provide the Extension's core functionality.

Data Type	Purpose	Collected	Stored Where
Email address	User account login via Firebase Authentication	Yes	Firebase servers (Google)
Firebase UID	Identify authenticated user for session creation	Yes	Firebase servers (Google)
Session token	Authorize proxy connection after login	Yes	Server memory only (1 hour TTL)
Selected server / connection state	Restore UI state when popup is reopened	Yes	Local device only (chrome.storage)
Browsing history	—	Never	—
Visited URLs	—	Never	—
Web page content	—	Never	—
Financial / health / location data	—	Never	—

⚙️ 3. How We Use Your Data

Email address & Firebase UID — Used solely to authenticate the user and determine access to premium proxy servers. Not used for marketing or analytics.
Session token — Generated server-side after successful Firebase token verification. Used to authorize proxy connections. Automatically deleted from server memory after 1 hour.
Connection state (local) — Stored on the user's device only via chrome.storage.local. Used to restore the popup UI state. Never transmitted externally.

🚫 4. Data We Do NOT Collect

The following data is never collected, stored, or transmitted by this Extension:

Browsing history Visited URLs Web page content Keystrokes / form input Location data Financial information Health information Device identifiers Cookies from other sites

      ⚠️ Note on Proxy Traffic
      Although web traffic is routed through our proxy server when the
      Extension is active, we do not log, store, inspect, or analyze
      the content of any proxied requests. Traffic is forwarded as-is
      and no records are retained.
    

🔗 5. Third-Party Services

This Extension uses the following third-party service:

Service	Provider	Purpose	Privacy Policy
Firebase Authentication	Google LLC	User login and token verification	View →

No other third-party analytics, advertising, or tracking services are used.

🤝 6. Data Sharing

We do not sell, trade, rent, or share your personal data with any third parties, except as described below:

Firebase / Google — Email and UID are processed by Firebase Authentication as part of the login flow. This is governed by Google's Privacy Policy.
Legal requirements — We may disclose data if required by law or to protect our legal rights.

🗂️ 7. Data Retention

Data	Retention Period	Auto-deleted
Email / Firebase UID	Until account deletion	On account delete
Session token (server)	1 hour from issuance	Auto (TTL)
Connection state (local)	Until extension is uninstalled or user disconnects	On uninstall

🛡️ 8. Security

All authentication is handled by Firebase Authentication, which provides industry-standard security including secure token issuance and verification.
Firebase ID Tokens are verified server-side using Google's public JWKS endpoint before any proxy access is granted.
Session tokens are stored in server memory only and are never written to disk or database.
All SDK files (Firebase, Bootstrap) are bundled locally within the extension. No external scripts are loaded at runtime.
This extension does not use eval(), dynamic script injection, or any form of remote code execution.

👤 9. Your Rights

You have the right to:

Access — Request information about what data we hold about you.
Deletion — Delete your account at any time via the Account page in the Extension. This removes your Firebase credentials permanently.
Opt-out — Simply disconnect the proxy and uninstall the Extension at any time. No data persists after uninstallation.

Right to Access Right to Delete Right to Opt-out

🧒 10. Children's Privacy

This Extension is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided personal data, please contact us immediately and we will delete it promptly.

📝 11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the Extension after changes constitutes acceptance of the updated policy.

📬 12. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us:

Developer: IlbonVPN Extension Team
Email: your@email.com
Response time: Within 72 hours