Privacy notice
What stays on your device, what the service receives and the choices you control.
Who is responsible
That Was Then is responsible for the personal information described here. Contact support@thatwasthen.dev about privacy.
Local data and service data
The extension reads your social activity in your own signed-in browser. That activity and your cleanup record stay on your device. They are not uploaded to the payment, access or telemetry services, and there is no server copy of them to request or to lose.
What stays in your browser
Depending on the platform and category you use, the extension stores the signed-in handle and platform account ID, the profile image and account creation date where the page exposes them, item IDs, links, dates, captions and comments the page makes available, the counts the cleanup rules need, your selected categories, dates and exclusions, the scan and deletion jobs with their attempt and confirmation state, a random installation ID, your signed access token, the signed configuration, your settings, and a local diagnostic log.
All of that sits in Chrome local extension storage and IndexedDB, not Chrome sync. The diagnostic log is capped at roughly 20,000 events and has no time-based expiry. You can clear diagnostics or a platform, reset local data, or remove the extension, which removes its storage under Chrome controls. A reset keeps the installation ID and access token so paid access survives it.
Chrome permissions are requested for a platform only when you connect it. There is no request for cookie access, browsing history, the debugger, webRequest or all-sites access.
What the service receives
A random installation ID, so a purchase can be bound to an installation and its access refreshed. The plan you picked, so the right amount is charged. Your purchase email, held by the payment provider for the receipt, and held here only as a keyed one-way value so a restore request can find the purchase without storing the address. Payment, subscription, refund and dispute records from the payment provider. A short-lived restore code. Ordinary network metadata, including your IP address, which the hosting provider processes and which a short checkout rate limit uses.
Where deletion consent is required, the service records the exact deletion-consent statement, its wording version and the server timestamp when you select Continue after payment. This record is associated with the governing purchase. The service also records when deletion first starts under a paid term. The deletion-start record contains no platform, account, category, item, date range, count or result. These records support access control, cancellation and refund decisions.
None of those records carry social content, a handle, an item ID, a selected date or a deletion count.
Feedback and support reports
The optional feedback form sends only the comment and optional reply email you enter when you select Send feedback. Cloudflare receives the submission and Resend delivers it to support@thatwasthen.dev. No account details, installation ID, scan results or diagnostic report are attached automatically. Without a reply email, we cannot respond directly. Ordinary network metadata is processed. A feedback rate-limit counter expires after about 60 seconds. The Worker does not retain your message; the email is support correspondence.
The extension creates support reports locally and copies them to your clipboard. Nothing is uploaded automatically. If you choose to email one, support receives whatever you send. Inspect or edit it first.
Agency enquiries
The agency enquiry form sends your name, email address, team or corporation, estimated client count and optional one-off or annual preference to admin@thatwasthen.dev. Cloudflare processes the request and Resend delivers the email. We use the details to reply to your enquiry. The Worker stores no enquiry body; a rate-limit counter expires after about 60 seconds. Enquiry emails are kept only while needed to handle the enquiry and meet legal obligations.
Affiliate applications
If you apply to the affiliate programme, the website sends your name, email address and the profile, channel or website details you provide to admin@thatwasthen.dev. We use that information to assess your application and reply to you. The lawful basis is our legitimate interest in reviewing and operating the affiliate programme. Do not submit information about anyone else.
Private affiliate dashboards show purchases attributed to your referral codes and commission records without customer contact details. Access uses a private link. Cloudflare holds report snapshots for up to five minutes. Private dashboards do not load website analytics.
Optional telemetry
Reliability telemetry is off unless you turn it on. When on, it sends the extension version, the signed configuration version, and integer counts keyed by event, platform and category. No installation ID, no strings, no content. The receiver and its host still see ordinary network metadata, so this is not described as anonymous. Turning it off pauses sending. Unsent counters remain in local extension storage and can be sent if you turn telemetry on again; a successful send clears them.
Local development builds can stream a fuller diagnostic log to a receiver on the same machine. The released extension contains no such receiver.
What the platforms receive
Working inside a platform page means the platform receives the same page requests and native actions you would make yourself while signed in. That processing is governed by the platform privacy policy and your own relationship with it.
Why each use is lawful
Under UK GDPR: contract, for running the extension, taking payment, issuing access and restoring a purchase; legal obligation, for financial and consumer records; legitimate interests, for handling voluntary feedback and support requests, security, abuse investigation and defending a legal claim, weighed against the few identifiers involved; consent, for optional telemetry, which you can withdraw in Settings.
Your social activity is never used for advertising, never sold and never built into a profile. No solely automated decision is made about you with a legal or similar effect. An automated rate limit can refuse repeated checkout or restore attempts.
Who receives information
Stripe is the merchant of record for Managed Payments transactions and processes checkout, payer and subscription information. Cloudflare hosts the access service and its records. Resend delivers restore-code, affiliate-application and feedback email and receives the submitted content and addresses needed to deliver them. GitHub hosts this website and processes normal request logs. Google distributes the extension and Chrome processes install and update information under Google terms. Facebook, Instagram and X receive the actions performed in their own pages. Advisers, auditors, courts or regulators may receive limited records where that is necessary and lawful, and a successor may receive business records if the business is sold.
No provider receives social content, handles, selections, item-level deletion data or deletion counts. Cloudflare and Stripe hold the installation ID and the paid term’s first deletion-start time. Cloudflare also keeps short-lived affiliate form rate-limit counters.
Transfers outside the UK
Some providers process information outside the UK. Their privacy terms describe the territories involved and the safeguards used for those transfers.
How long things are kept
Local data stays on the device until you clear it, reset the extension or uninstall it, with the diagnostic log additionally capped by event count. A checkout, feedback or affiliate-form rate-limit counter expires in about 60 seconds. A restore code lasts about ten minutes and works once. Payment, subscription, refund, deletion-consent and contract records are kept while the contract is live and normally six years after it ends, unless the law requires otherwise. Access and restore records are kept while access can still be restored. Support correspondence and affiliate applications are kept only while needed to handle the request or application and meet legal obligations.
Security
Access tokens and configuration are signed and verified locally, and the extension falls back to its bundled configuration rather than to no limits. Payment webhooks are signature verified. Restore codes are short-lived and single use. Everything sent to a service uses HTTPS. The strongest protection is that your social activity has no server copy. No system is completely secure.
Your choices and rights
You can decline telemetry, clear diagnostics or a platform, reset local data, uninstall the extension, turn off renewal without losing the rest of a paid term, and opt out of the website measurement described below.
Under UK data protection law you may have the right to be informed, to access your personal information, to have it corrected or erased, to restrict or object to processing, to receive it in a portable form and to withdraw consent. Those rights depend on the processing and have legal exceptions. Withdrawing consent does not make earlier processing unlawful. Local social data is only on your device, so it cannot be retrieved from a server, and some payment and legal-claim records cannot be erased on request. Email support@thatwasthen.dev to exercise a right. You can also complain to the Information Commissioner’s Office at ico.org.uk.
Changes
This notice is revised as the product changes. A material new use of personal information is brought to affected users before it starts where that is required.
Optional acquisition measurement
Links to the Chrome Web Store can carry a general source, medium and campaign, such as Product Hunt and launch. Google reports listing views and completed installs in aggregate. These reports do not identify an individual purchaser.
After a new installation, an optional welcome page lets you share how you found the extension. With your agreement, only those general labels and the time you agreed are saved in local extension storage for up to 30 days and sent with a future checkout to Cloudflare and Stripe. An open tab on this website can suggest the source; otherwise you can choose it yourself. The website never receives your installation ID. No browsing history or social activity is included.
You can skip this choice and use the extension normally. Remove a saved source in extension Settings to stop it being attached to new checkouts. A checkout or purchase already created can retain its source with the payment record. This optional measurement uses consent and is separate from reliability telemetry. The website analytics opt-out also stops campaign link decoration and source suggestions.
Cookies and website analytics
This website sets no cookies. Local storage holds your progress through the checklist, and an opt-out marker if you use the button below. Neither leaves your browser.
Cloudflare Web Analytics counts page views on this site. It is cookieless, it builds no profile and it does not follow you to other websites. Cloudflare receives the page address, the referring page, and general device and country information derived from the request. It runs by default because an aggregate page count is the only thing it produces and asking first would measure who answers a banner rather than who reads the site. Opt out here and the measurement script is not loaded on any page you visit in this browser.