Privacy

Privacy Policy

Last updated: 2026-05-02 · Version 1.0
TL;DR
  • Your wallet lives in your browser. We never see it.
  • We collect email addresses if you sign up — that's it.
  • No cross-site tracking. No fingerprinting. No demographic inference.
  • You can clear your wallet, delete your email, and walk away anytime.

What ContextPass collects

  • Email addresses, only when you submit one through one of our forms (early access on the homepage, end of the demo). Stored in our Supabase database. We also record which form you submitted from (hero, footer, or demo) so we can measure which messaging works.
  • Anonymous traffic data, via Cloudflare Web Analytics (when enabled). No cookies, no fingerprints, no personal identifiers. Aggregate visit counts and page paths only.

What ContextPass does NOT collect

  • Your wallet contents — sizes, preferences, grants, audit log, points. These stay 100% in your browser's local storage.
  • Cross-site tracking. We do not follow you across the web.
  • Demographic inference. We never guess your age, gender, race, or income.
  • Browser fingerprints. We do not silently identify you.
  • Advertising cookies. We do not run ads.
  • Your IP address as a personal identifier. Cloudflare logs IPs for security but we do not tie them to your email.

The wallet

The ContextPass wallet at contextpass.io/wallet stores everything in your browser's localStorage. We do not have access to it. You can:

  • Export it as a JSON file (download from the danger zone)
  • Import another wallet (upload a previously-exported JSON)
  • Clear it permanently (irreversible)

Closing the browser tab does not clear the wallet. Clearing browser data does. You can also explicitly clear it via the danger zone in the wallet UI.

Sharing data with merchants

When ContextPass-enabled merchants exist (currently in pilot): when you approve a grant for a merchant site, only the specific fields you approved are shared with that site, scoped to that origin, for the purpose you approved, until you revoke or the grant expires. Each merchant gets a unique pairwise identifier for you — they cannot link your activity across other ContextPass-enabled stores.

Merchants never receive: your name, email, exact age, browsing history, or any data you didn't explicitly approve.

Your rights

  • Delete your email from our list: email hello@contextpass.io with subject "Delete my email." We'll remove it within 7 days.
  • Clear your wallet: use the danger zone on /wallet
  • Object to processing: stop using the service. Your data falls out of scope.
  • Data portability: export your wallet as JSON.
  • Lodge a complaint with a regulator: if you believe your privacy rights have been violated, contact your local data protection authority.

Children

ContextPass is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has submitted information to us, contact hello@contextpass.io and we'll remove it.

Cookies

We do not use cookies for tracking, advertising, or session identification. The wallet uses browser localStorage, not cookies. If Cloudflare Web Analytics is enabled, it operates without cookies.

Data location

Email signups are stored in Supabase (US-East region). Cloudflare data is processed at the edge globally. Wallet data never leaves your device.

Third-party services

  • Cloudflare: hosting, DNS, edge network
  • Supabase: email signup database
  • Pexels (deprecated as of 2026-05): previously used for product photos in the demo

Changes to this policy

If we update this policy, we'll change the date at the top. Material changes will be announced on the homepage. Continued use of ContextPass means agreement to the updated terms.

Contact

Questions, concerns, requests: hello@contextpass.io

Disclaimer

This policy is written in plain English to reflect how the product actually works. It is not formal legal advice. ContextPass is operated by Jeffrey Thompson as a solo project, pre-incorporation. A formal policy will replace this one when ContextPass becomes a registered legal entity.