SmashKitPrivacy Policy
Last updated 7 October 2026
This policy explains what personal data SmashKit handles. SmashKit is a trading name of Daniel Lupu, a sole trader based in the United Kingdom, and is the controller of the data described here. Contact: support@getsmashkit.com.
In short: SmashKit has no accounts, analytics, ads or tracking. The snapshot of your tab never leaves your browser. Buying a tool shares a random install ID and your order ID with our server. Your name, email and card details go to Paddle, which runs the checkout.
1. In the extension
SmashKit asks Chrome for three permissions: activeTab (access to the current tab only when you click the
icon), scripting (to draw the overlay in that tab) and storage (to save the items below in your
browser). It cannot read other tabs or your browsing history.
| Data | Where it stays | Why |
|---|---|---|
| Snapshot of the visible tab, taken when you start a tool | Only in that tab's memory. Never saved or sent anywhere; discarded on Restore page or when you leave the page. | The tools draw on it. |
| Install ID: a random identifier created when SmashKit first runs | Your browser (chrome.storage.local). Sent to our server only when you buy or refresh purchases. | Ties purchases to this installation. |
| Licences: signed records of tools you've bought (install ID, tools, product, Paddle order ID, issue time) | Your browser. | Proves a tool was paid for. |
| Pending checkouts: Paddle order ID, product and start time, for up to 24 hours | Your browser. | Lets SmashKit unlock a tool after you pay. |
Snake scores are kept in memory only and are lost when you restore the page. The extension contains no analytics or third-party code, and its sounds are bundled inside it.
2. Our server
Our payment server runs on Cloudflare Workers at getsmashkit.com. It is contacted only when you start a purchase or refresh purchases, and when Paddle notifies it about a payment.
- What it receives from the extension: your install ID, the product you chose and the Paddle order ID.
- What it sends to Paddle: the price of the product, with your install ID and the product name attached to the order so the payment can be matched to your installation.
- What it receives from Paddle: the order's ID, status and items, and the install ID and product attached to it. We ask Paddle not to include sensitive fields.
- What it keeps: a record of each paid order (order ID, status, install ID, product, price ID) for up to 90 days, so it can confirm the purchase. Licences are created on request and not stored on the server.
We don't add request logging. Cloudflare processes IP addresses and request details to deliver and protect the site, under the Cloudflare Privacy Policy.
3. Payments: Paddle
Paddle.com is our online reseller and Merchant of Record. When you buy, Paddle's checkout collects your email address, country (and postcode where needed for tax), payment details and device information for fraud prevention, and processes them as an independent controller under the Paddle Privacy Policy. The checkout page on getsmashkit.com/pay loads Paddle's checkout script, which may set cookies needed for the checkout.
We never see or store your card details. In the Paddle dashboard we can see order details such as your email address, country, product and amount, which we use only to give support, restore purchases and handle refunds.
4. This website
The pages of getsmashkit.com set no cookies and load no analytics, fonts or scripts from third parties.
5. Email
If you email support@getsmashkit.com, we keep your message and address to answer you and for as long as needed to deal with your request, up to two years.
6. Legal basis
Under UK GDPR we handle this data because it's needed to provide what you bought (contract), to keep the service secure and prevent fraud (legitimate interests), and to keep records the law requires (legal obligation, mostly met by Paddle as the seller of record).
7. Sharing and transfers
We share data only with Paddle (payments) and Cloudflare (hosting), each of which may process it outside the UK under appropriate safeguards. We don't sell data or use it for advertising.
8. Your rights
You can ask to access, correct or delete your data, or object to how we use it, by emailing support@getsmashkit.com. Uninstalling SmashKit deletes everything it stored in your browser. If you're unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office at ico.org.uk.
9. Children
SmashKit isn't directed at children under 13, and purchases must be made by an adult or with their permission.
10. Changes
If SmashKit starts handling data differently, we'll update this policy and the date above before the change takes effect.