Privacy policy

Last updated: November 6, 2026. Pixel Shield is operated by Apex Infra LLC (“we”). This policy is written in plain English on purpose. If anything here is unclear, email the address on our contact page before you rely on it.

The one-paragraph version

The browser extension watches, on your device, for network requests to known identity-resolution pixels. It never sends us the sites you visit. Once a day it sends us a count per broker for the week and a random install id, nothing else. If you buy Shield or the Kit, you give us your name, the emails, phones and address you want brokers to delete, and your state. We encrypt that, use it only to fill in your requests, and you send every request yourself from your own email or on the broker's form. Replies that reach your tracking address are stored so you have proof. We do not sell or share any of it.

What the extension collects

• On your device only: the hostname of a site where a detection happened and which broker it was, kept for 7 days so the badge and weekly digest work. This never leaves the browser.
• Sent to us: an ISO week label, a random install id generated once at install, and the number of detections per broker. Example: { week: "2026-W45", installId: "3f1c…", counts: { retention: 3 } }. No URLs, no page titles, no IP-derived location is stored. Our server rate-limits by a hashed IP that is not retained beyond an hour.
• You can turn the counts upload off in the extension settings. The detector keeps working.

What the web app collects

• Account: your email address, for sign-in links and reminders.
• Request details (paid plans): name, email addresses, phone numbers, mailing address and state. Stored encrypted (AES-256-GCM) with a key held outside the database. Used only to prefill your requests and to show them back to you.
• Request tracking: which broker, the date you told us you sent it, the 45-day deadline, and status changes.
• Broker replies: emails that brokers send to your per-request tracking address (req-…@ our inbound domain). We store the sender, subject, message id, our classification of the reply, and the body (encrypted). We use an automated language model to classify each reply as acknowledged, needs you, deleted, refused or unknown. Reply text is sent to that model provider for classification and is not used to train models under our agreement with them.
• Payments: handled by Stripe. We store your Stripe customer id, plan and a hash of the email used at checkout. We never see card numbers.
• Optional: if you paste your extension install id into the dashboard, we can show you your own weekly counts. That is the only way counts are ever linked to a person, and you can clear it at any time.

What we do not do

• We do not sell, rent or share personal information. We are not a data broker.
• We do not act as your authorized agent and do not send requests on your behalf. You send them.
• We do not log in to broker websites with your credentials, and we do not bypass CAPTCHAs or other verification. Steps only you can do appear as tasks for you.
• We do not put your email address or other personal data in URLs, analytics or third-party scripts.

Service providers

Vercel (hosting), Neon (database), Stripe (payments), Resend (sending and receiving email), and Anthropic (reply classification). Each receives only what it needs for its function.

Retention and deletion

Account and request data are kept while your account exists. Delete your account from the dashboard or by emailing us and everything tied to it is removed within 30 days, except Stripe records we must keep for tax and fraud purposes. Extension counts are aggregate and are not tied to you unless you linked an install id, in which case the link is deleted with your account.

Your rights

Wherever you live, you can ask us to access, correct, delete or export your data, and we will do it. California and Texas residents have the specific rights our own requests cite, and they apply to us too.

Changes

We will post changes here with a new date. Material changes get an email.