Privacy Policy

This policy covers all products and services operated by Symvek Technologies Inc., operating as Symvek, located in BC, Canada.

Our current product is Symvek Shield, a privacy browser extension.

Shield is a browser extension for Chrome and Firefox. It runs entirely in your browser. No data about your browsing history, blocked trackers, privacy scores, or any other activity ever leaves your device.

• All processing happens locally in the browser extension
• No server communication for tracking or analytics
• Filter list updates may fetch from our CDN, but no user data is sent
• Premium features run client-side; license validation sends only a one-way hash of your key and device to our license server, never your browsing

The Symvek website (symvek.com) does not use analytics, tracking pixels, ad networks, or third-party scripts that collect user data. Fonts are self-hosted, so the site loads nothing from Google or other font CDNs. The one exception is the Sentinel map page, which loads basemap tiles from a third party (CARTO); that single dependency is disclosed in Third-Party Services below.

We do not set cookies. The website is statically served and the Shield extension validates its license offline, so there is no authentication state to persist in a cookie. If a future product surface ever requires session state, the design will keep it client-side wherever possible; if a cookie ever becomes unavoidable, this policy will be updated to disclose it before the change ships. Cookies are never used for advertising or cross-site tracking.

Shield runs entirely in your browser. You do not have to take our word for any privacy claim on this page. The extension makes no server calls for tracking or analytics. You can verify this with any network monitoring tool.

We minimize third-party dependencies. Where we do use external services, here is what to know:

• Payment processing (Stripe): If you subscribe to Premium, Stripe processes payment and collects your name, email, billing address, and card details to take payment and meet tax law. Symvek never receives or stores your card number. Stripe's privacy policy governs that payment data.
• Map tiles (CARTO): The Sentinel map page (symvek.com/sentinel/map) loads basemap tiles from CARTO as you pan and zoom, so CARTO receives your IP address and the map area you are viewing. This is the only third party the site contacts directly from your browser, and only on that one page. The map's address search does not leak: it is routed through our own server, which queries the geocoder on your behalf and logs nothing, so your search terms and IP never reach a third party. Site fonts are self-hosted, so the website loads no Google Fonts, analytics, pixels, ad networks, or CDNs.

Symvek Technologies Inc. is incorporated in British Columbia, Canada. This policy is governed by the laws of British Columbia and the federal laws of Canada applicable therein, including the Personal Information Protection and Electronic Documents Act (PIPEDA).

We do not collect browsing or behavioral data. For Premium users, your name, email, and billing details are held by Stripe, our payment processor; Symvek holds only opaque subscription identifiers and your license. You may request access to or deletion of this data at any time by contacting privacy@symvek.com, and we will action it with Stripe.

You have the right to access, correct, delete, or receive a copy of the personal data we hold about you, and to object to or restrict its processing. Because the free tier stores everything on your own device, in most cases we hold nothing to act on. For Premium, the data involved is described above. To exercise any right, email privacy@symvek.com and we will respond within 30 days.

If you are in the EU, UK, or Switzerland, you also have the right to lodge a complaint with your local data protection supervisory authority. In Canada, you may contact the Office of the Privacy Commissioner of Canada. We would rather you contact us first so we can put it right.

Where data protection law such as the GDPR requires a legal basis, ours are: performance of a contract for handling your subscription and payment through Stripe; and legitimate interests for validating your Premium licence and enforcing your device limit (using only one-way hashes) and for responding to messages you send us. We never process your data for advertising, because we do none.

The limited data involved in Premium is handled by service providers outside Canada: Stripe (payment, in the United States) and Cloudflare (licence validation and hosting, on a global edge network). These transfers are covered by those providers' data processing agreements, including Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework and UK and Swiss addenda. No browsing data is ever transferred, because none is collected.