MonthSweep privacy policy
Effective 2026-10-18 · applies to the MonthSweep Chrome extension, version 0.1.0 and later · publisher: Gilad Amar ("we")
1. Data the extension handles on your device
| Data | Where it is kept | How long |
|---|---|---|
| Settings: file name pattern, folder, theme | chrome.storage.local | Until you change them or uninstall |
| Your checklist of billing portals (names and addresses you add), the months you ticked off, and the vendor name you used for each site | chrome.storage.local | Until you delete them or uninstall |
| A counter of files downloaded this month (for the free plan) | chrome.storage.local | Reset monthly |
| Invoice details found on a page (date, amount, number, link) | Memory, while the side panel is open; written into file names and, with Pro, an index.csv in your Downloads folder | Not stored by the extension |
| Downloaded invoices and receipts | Your Downloads folder (MonthSweep/<month>/) | Under your control |
| License details if you activate Pro: the key, Lemon Squeezy activation ID, plan, the purchase email and expiry returned by Lemon Squeezy, and the last check time | chrome.storage.local | Until you deactivate the license or uninstall |
None of this data is sent to us; we do not operate any server that receives it.
2. Data that leaves your device
Downloading your documents. When you download, your browser requests the invoice files from the billing site you are on, with the session you are already logged in to, exactly as if you clicked each link. For documents without a direct link, MonthSweep clicks that site's download button for you. MonthSweep never stores passwords and never logs in for you.
License checks. If you enter a Pro license key, the extension sends HTTPS requests to https://api.lemonsqueezy.com/v1/licenses/: activate (your key and a random instance name), validate (your key and the activation ID, at most once every 7 days, triggered by a once-a-day background check) and deactivate (when you click Deactivate). Lemon Squeezy (Merchant of Record) receives your IP address as with any web request and processes this data under its privacy policy. Checkout happens on Lemon Squeezy's website, not in the extension.
3. Access to websites
- Site access (
<all_urls>) is an optional permission, requested for one site at a time when you press Scan on it. Nothing is granted at install. You can remove access in Chrome's extension settings. - The document finder is injected only into the tab you scan, when you press Scan. The download renaming runs only while the side panel is open, so your other downloads are not affected.
- No remote code is loaded. All code ships inside the extension package (Content Security Policy
script-src 'self').
4. Permissions and why we need them
| Permission | Used for |
|---|---|
storage | Settings, checklist, monthly counter and license status on your device |
sidePanel | Showing MonthSweep next to the billing page |
scripting | Finding invoice links and buttons on the page you scan |
activeTab | Reading the current tab's address when you open MonthSweep |
downloads | Saving the files you selected with consistent names |
alarms | The once-a-day check of whether a Pro license is due for its weekly re-validation, and (Pro) the start-of-month reminder |
notifications | Pro: one reminder per month to collect invoices |
Optional site access (<all_urls>, granted per site) | Working on the sites you choose (section 3) |
Host access to api.lemonsqueezy.com | License activation, validation and deactivation (section 2) |
5. What we don't do
- No analytics, telemetry, advertising, cookies or fingerprinting in the extension.
- We don't sell or transfer user data to third parties, except the license check described above.
- We don't use or transfer user data for purposes unrelated to the extension's single purpose.
- We don't use or transfer user data to determine creditworthiness or for lending purposes.
The use of information received from Chrome APIs follows the Chrome Web Store User Data Policy, including the Limited Use requirements.
6. Your choices and rights
Delete portals from the checklist, deactivate your license, or uninstall MonthSweep. Downloaded files stay in your Downloads folder until you delete them. Uninstalling MonthSweep removes all of its storage. We hold no extension data on our servers. For purchase records held by Lemon Squeezy or any privacy question (including GDPR/UK GDPR requests), email busywright@mail.grokbot.com.
7. Children
MonthSweep is a workplace tool and is not directed at children under 16.
8. Changes
If a future version handles data differently, we will update this page and the effective date before releasing it.
9. Contact
Gilad Amar, Thailand · busywright@mail.grokbot.com