Overview
MyKK.us consists of two parts:
- The MyKK Cloud Dashboard at start.mykk.us — a free, open-source browser start page you can use without installing anything.
- The MyKK.us Chrome extension — a companion that activates Pro features on the dashboard for paid subscribers.
This policy explains what data each part collects, where it's stored, who it's shared with, and how you can control it.
Data We Collect
MyKK Cloud Dashboard (start.mykk.us)
The dashboard stores your configuration locally in your browser via localStorage. This includes widget layout, bookmarks, notepad contents, theme selection, and custom CSS. This data never leaves your device unless you opt into cloud sync.
If you enable cloud sync, your dashboard configuration is stored in Firebase (operated by Google). Cloud sync is opt-in and disabled by default.
MyKK.us Chrome Extension
When you click "Sign in with Google" in the extension popup to activate Pro, the extension collects and transmits:
- Email address — read from your Google account via OAuth (
chrome.identity.getAuthToken) one time after you grant consent. The email is sent to our API at api.mykk.us so we can look up your Pro subscription.
- Device identifier — a random UUID generated once per browser installation and stored in
chrome.storage.local. Sent alongside your email so we can enforce per-subscription device limits (default: 3 devices per subscription).
The extension does not read browsing history, contents of other tabs, form data, or any Google account data other than your email address.
Payment Information
If you purchase Pro, payment is processed by Stripe. Card details are entered directly into Stripe Checkout — we never see or store them. After a successful payment, Stripe notifies our API via webhook and we record the resulting subscription metadata (customer ID, subscription ID, email, plan) in our database.
Where Your Data Is Stored
- On your device — dashboard configuration in
localStorage; extension cache of subscription status, email, and device ID in chrome.storage.local.
- Our backend (Cloudflare) — a Cloudflare D1 (SQLite) database holds one row per paid subscription with: email, Stripe customer ID, Stripe subscription ID, plan name, max device count, active flag, and created/updated timestamps. A separate table records device activations (subscription record ID, device UUID, activation timestamp).
- Stripe — all payment data (cards, billing addresses, invoices) is stored by Stripe under their privacy policy.
- Firebase (optional) — if you enable dashboard cloud sync, your configuration is stored by Google under their privacy policy.
How We Use Your Data
- To verify your Pro subscription when you sign in with Google.
- To communicate your subscription status to the dashboard so Pro widgets unlock automatically.
- To enforce the per-subscription device limit.
- To revalidate your subscription roughly every 24 hours so expired subscriptions stop unlocking Pro features.
- To process payments and send subscription-related transactional email (receipts, renewal notices, cancellation confirmations) via Stripe.
Data We Do Not Collect
- Browsing history or contents of other tabs or windows
- Analytics, telemetry, or usage tracking
- Advertising or tracking cookies
- Your name, postal address, age, or phone number
- Any Google account data other than the email address you sign in with
Data Sharing
We do not sell your data, and we do not share it with third parties for advertising, analytics, or marketing. Your data is shared only with the service providers we depend on to deliver MyKK:
- Stripe — processes payments and manages your subscription.
- Google — authenticates Google Sign-In; if you enable cloud sync, Firebase (a Google service) stores your dashboard configuration.
- Cloudflare — hosts our API (Cloudflare Workers) and subscription database (Cloudflare D1).
Data Retention
- Local data persists until you clear your browser storage, sign out of the extension, or uninstall it.
- Subscription records persist while your subscription is active. If you cancel, the record is kept (marked inactive) so we can restore access if you resubscribe. To request full deletion, contact support@mykk.us.
- Device activations are removed when you click "Sign Out" in the extension popup, or when your subscription is cancelled.
Your Rights and Controls
- Sign Out — use the button in the extension popup. This deactivates the current device and clears locally cached subscription data.
- Uninstall — removes all extension data from your device.
- Manage or cancel Pro — use the Stripe Customer Portal linked from your receipt emails.
- Delete my data — email support@mykk.us from the address associated with your subscription. We'll remove your subscription record and device activations from our database.
Security
All network traffic uses HTTPS. OAuth tokens are managed by Chrome's identity API and are not persisted by the extension. Our Cloudflare D1 database is encrypted at rest. Stripe handles payment data directly under their PCI-DSS compliance.
Children's Privacy
MyKK is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has signed up for Pro, contact us and we'll delete the account.
Changes to This Policy
We'll update the "Last updated" date at the top whenever this policy changes. For material changes affecting how we use or share data, existing Pro subscribers will be notified by email.
Contact
Questions, deletion requests, or anything else: support@mykk.us.