Privacy Policy Effective Date: May 18, 2026

1. Introduction ExpAloud ("the Extension", "we", "our") is a Chrome browser extension that reads educational content aloud using your device's built-in text-to-speech engine. This Privacy Policy explains what information the Extension handles, how it is used, and your rights as a user. By installing or using ExpAloud, you agree to the terms described in this Privacy Policy.
2. Summary in Plain English We do not sell your data. We do not show ads. We do not track your browsing history, the URLs you visit, the content of pages you read, or your behaviour on those pages. We do not use any third-party analytics, advertising SDKs, or tracking pixels. We do not transmit page content or audio to any server. Text-to-speech runs entirely on your device using your browser's built-in speech engine. The only data that leaves your device is what is strictly necessary to (a) start your free trial, (b) verify your subscription license, and (c) prevent abuse of our verification server.
3. Information Stored Locally on Your Device The Extension uses chrome.storage.local to remember the following on your device only. None of this data leaves your device except where Section 4 explicitly states otherwise. Anonymous install identifier — a randomly generated UUID created on first use. Not linked to your name, email, IP, or any external identifier. License key (only when you've subscribed) — stored in obfuscated form. Subscription verification cache — a cached validity flag and the timestamp of the last server check (refreshed at most every 6 hours). Trial state — your trial day count and whether it has expired. Voice and playback preferences — voice name, speed, pitch, volume. Optionally stored per website if you customise per-site settings. Panel state — position, size, and minimized state of the floating panel. Resume position — a small marker remembering where you stopped reading, tied to a hashed fingerprint of the page content (not the URL). Optional Options page entries — custom voice profiles and custom CSS selectors you choose to save. All of these settings can be viewed, edited, or removed at any time from the extension's Options page (accessible via the gear icon in the panel header, or from chrome://extensions).
4. Information Transmitted Off-Device The Extension contacts exactly one external service: our license verification proxy hosted on Cloudflare Workers at https://api.expaloud.com. We do this in two situations only: (a) When your free trial begins or is re-checked. We send your anonymous install identifier so the server can record your trial start time and tell the Extension how many days remain. (b) When your license key is being verified. We send your license key and your anonymous install identifier. Our server validates the key against our subscription provider (Whop) and returns whether it is currently valid. In both cases, our server logs only what is necessary for fraud prevention and rate limiting: a request count per install identifier and per IP address, plus the trial start timestamp. We do not log page contents, URLs, search queries, reading habits, or any other browsing data — because the Extension never sends any of that information.
5. Third Parties ExpAloud relies on the following third-party services. Each is sent only what is described in Section 4: Cloudflare, Inc. — hosts our license verification proxy. Cloudflare receives requests containing your install identifier (and license key when verifying). Cloudflare's privacy policy: https://www.cloudflare.com/privacypolicy/ Whop Inc. — handles subscription billing and license-key issuance. When you subscribe, you interact with Whop directly through their website. Whop collects your payment information and email address in accordance with their own privacy policy: https://whop.com/privacy. Our license verification proxy forwards only your license key to Whop's validate_license endpoint when checking a subscription; it does not share your install identifier with Whop. ExpAloud does not have access to your payment details at any point — those are handled entirely by Whop on their website. The "Subscribe" button inside the Extension panel is a standard hyperlink that opens Whop's website in a new tab. No data is transmitted when you click it; we simply send you to their page.
6. Data Retention On your device: retained until you remove the Extension or clear your browser data. On our server (Cloudflare Workers KV): trial entries (install identifier

• trial start timestamp) are retained for up to 365 days from creation, then automatically deleted. Rate-limit counters are retained for approximately one hour, then automatically deleted. License-key verification requests are processed in memory and forwarded to Whop. We do not durably store license keys on our server.

1. Permissions Requested ExpAloud requests the following Chrome permissions, used only as described: activeTab — lets the Extension inject the reader interface into the tab you are currently viewing when you click the toolbar icon. storage — lets the Extension save the preferences and state described in Section 3 locally on your device. scripting — lets the Extension inject its reader scripts into the active tab when needed. Access to all websites (<all_urls>) — required because ExpAloud is intended to work on any website where you read study or educational content, including question banks, flashcard tools, online courses, article/PDF viewers, and similar reading-focused pages. The Extension reads page text only when you actively click "Play" inside its panel on that page; the text is converted to speech locally by your browser and is never transmitted anywhere. The Extension does not use these permissions for any purpose beyond what is described above.
2. Your Rights You can delete all data by removing the Extension from Chrome. All local data is erased automatically. On our server, your trial record will be deleted automatically within 365 days; you may request earlier deletion by emailing us (see Section 11). You can revoke your subscription at any time through your Whop account. You can request information about the data tied to your anonymous install identifier by contacting us. Because the identifier is not linked to your personal identity, we may need a copy of the identifier (visible in your browser's extension storage) to look up the corresponding record.
3. Children's Privacy ExpAloud is not directed at children under the age of 13. We do not knowingly collect any information from children. If you believe a child has provided personal information through a subscription, please contact us and we will take appropriate action.
4. Changes to This Privacy Policy We may update this Privacy Policy from time to time. When we do, we will update the Effective Date at the top of this document. Continued use of the Extension after any changes constitutes acceptance of the updated policy.
5. Disclaimer

ExpAloud is an independent product. It is not affiliated with, endorsed by, or sponsored by any third-party educational service, question bank, flashcard tool, or online course provider. Users are responsible for ensuring that their use of ExpAloud complies with the terms of service of the websites where they choose to use it. ExpAloud is intended for personal study use only; users may not record, redistribute, or share any audio output generated from copyrighted content.

1. Contact Us If you have any questions, concerns, or requests regarding this Privacy Policy or the Extension, please contact us at: ExpAloud Support Email: expaloud@gmail.com Website: https://whop.com/expaloud/expaloud-ed/

This policy was last updated on May 18, 2026.