Privacy Policy

1. Information we collect

• Account details: Your chosen username and email address. Your username helps other users find you and share access with you. Your email is intended for account recovery and related support.
• Account and activation information: Information that associates your account and licence with your registered browser profile.
• Sharing records: Who sent and received a share, the website involved, when it was created, its expiry, and its status.
• Shared website information: When you choose to share a website, Passport collects the cookies and saved website information needed to attempt to restore its signed-in session for your recipient. This can include authentication information and personal information stored by that website.
• Purchase information: Payment status, purchase references, licence information, and activation records.
• Support and service information: Information you send us when requesting help, along with limited error and security records needed to operate and protect Passport.

2. How we use information

We use this information to:

• Create your account and maintain access to it.
• Let users find recipients by username.
• Deliver, display, and manage the shares you authorize.
• Apply sharing limits and access expiry settings.
• Verify purchases and manage licence activation.
• Respond to support and account recovery requests.
• Prevent misuse, investigate errors, and protect the service.

Passport does not sell your personal information or use shared website information for advertising.

3. Website access and browser permissions

Passport requests access to websites you choose so it can collect or restore the relevant session information. Browser permissions also support website selection, local account preferences, and access expiry.

Passport does not require you to enter a website password into the extension. However, the session information you share can grant access similar to being signed in.

You can remove website permissions in your browser settings. Doing so may prevent sharing, restoration, or cleanup from working for those websites.

4. How sharing works

Shared website information is encrypted before it is sent and is intended to be opened by the recipient’s registered browser profile. Passport retains the sharing records needed to deliver access and display your sharing history.

Your recipient can use the access you share and may be able to view or change information within the website account. The website’s own privacy policy and account controls continue to apply.

Ending a share or letting it expire asks Passport to remove the received access when the recipient’s extension can process that change. This cannot guarantee that previously copied information or independently retained sessions become unusable. Use the website’s own sign-out and session controls when you need to end account access.

5. Information stored on your device

Passport stores account credentials, preferences, and dashboard information in your browser profile so you can return to the extension without entering your details each time.

Receiving a share places the relevant website information in that browser profile. This may replace an existing session for the same website. A separate browser profile is recommended for receiving shared access.

6. Payments

Dodo Payments processes purchases. Payment details you enter at checkout are handled under Dodo Payments’ privacy policy . Passport does not receive or store your full payment card details.

We retain the purchase and licence records needed to confirm payment, provide lifetime access, enforce activation limits, and handle refunds or payment disputes.

7. When information is shared

Information may be shared:

• With the recipient you select, as necessary to provide the website access you authorize.
• With service providers that help us operate Passport, process payments, and protect the service, limited to what they need for those purposes.
• When required by law or reasonably necessary to address fraud, security threats, or protect legal rights.

Your email address is not used as the public recipient search field. Your username is visible where needed to identify participants in a share.

8. Retention and deletion

We retain information for as long as needed to provide Passport, manage purchases and licences, address disputes, and meet applicable legal obligations. Expired or revoked shares are no longer available for new use through Passport, although related records may remain for these purposes.

To request account deletion or ask about retained information, contact no_email_shared@proton.me . We may request reasonable proof of account ownership before acting. An email address alone may not establish ownership because email addresses are not verified when an account is created.

Uninstalling Passport removes its ability to operate in that browser profile but does not automatically delete your account, purchase records, or website sessions already restored in the browser.

9. Your choices

• Choose which websites to share and who receives access.
• Set an access window and request that a share end early.
• Review outgoing and received shares in the extension.
• Remove website permissions or uninstall the extension.
• Contact us about access, correction, or deletion requests.

Depending on where you live, you may have additional privacy rights under applicable law.

10. Security

We use safeguards designed to protect account information and shared website access. No service can guarantee absolute security. Keep your browser profile secure and avoid sharing access to accounts containing information you do not want the recipient to see.

11. Changes to this policy

We may update this policy as Passport changes. The date at the top identifies the latest revision. Where required, we will provide additional notice of significant changes.

12. Contact

For privacy questions or requests, contact Passport at no_email_shared@proton.me .