← toolkit.rehandev.xyz

Privacy Policy

Last updated: July 4, 2026

The short version: your itch.io analytics data is processed locally in your browser and is not uploaded to our servers. We store only your account email and the small settings you choose to sync. We never sell data. Payments are handled by Paddle — we never see your card details.

1. Who we are

Itch Toolkit is operated by Rehan Faisal ("RehanDev"). Contact: rehanfaisal123@gmail.com. Itch Toolkit is not affiliated with itch corp / itch.io.

2. What the extension processes, and where

DataWhere it livesPurpose
Your itch.io dashboard data (views, downloads, sales, referrers, game pages)Locally in your browser's extension storage onlyRendering your analytics dashboard, alerts and research tools
Account email (and name/avatar if you sign in with Google)Google Firebase (our auth provider)Creating and securing your account
Synced settings: watchlist, favourite tags, alert preferences, API keyGoogle Firestore, tied to your accountCloud sync across your devices
Subscription status (free/Pro)Firestore + PaddleUnlocking Pro features you paid for
Game title & short description (only when you click the AI suggestion button)Sent to Google's Gemini API for that requestGenerating title/tagline suggestions you asked for
Payment & billing detailsPaddle.com (merchant of record) — never on our systemsProcessing subscriptions, invoices and tax
Basic website analytics (this site only)Google AnalyticsUnderstanding site traffic

The extension requests permissions only for itch.io pages and the Google services listed above. It does not read your browsing history or activity on other websites.

3. What we do NOT do

4. Legal basis & retention

We process account data to provide the service you signed up for (performance of contract) and minimal analytics on this website based on legitimate interest. Account and sync data are kept while your account exists and deleted when you delete your account or on request. Local extension data is removed when you uninstall the extension or clear its storage.

5. Your rights

You can request access to, correction of, or deletion of your personal data at any time by emailing rehanfaisal123@gmail.com from your account email. Deleting your account removes your synced data from Firestore. Depending on where you live (e.g. EU/UK GDPR, California CCPA), you may have additional statutory rights, which we honour.

6. Third-party processors

7. Security

Data in transit is encrypted (HTTPS). Sync data is protected by Firebase security rules so only your authenticated account can read it. No method of storage is 100% secure, but we minimise what we collect in the first place — the most sensitive data (your analytics) never leaves your browser.

8. Children

The Service is not directed at children under 13 (or the minimum age in your country) and we do not knowingly collect their data.

9. Changes

We will post any changes to this policy on this page with an updated date, and note material changes on the extension's dashboard.