LEGAL
Privacy Policy
This policy applies to all products and services operated by MadoKaze. Product-specific details are listed at the bottom of this page.
Last updated:
1. Overview
MadoKaze ("we", "us", "our") builds lightweight tools designed to feel natural and refreshing to use. This Privacy Policy applies to all products, websites, and services operated under the MadoKaze brand. By using any MadoKaze product, you agree to the practices described below.
2. Data We Collect
- Google Account InformationWhen you sign in with Google, we receive your email address, display name, and profile photo via OAuth 2.0. This is used solely to identify your account and sync your data across devices.
- Account Preferences & User ContentSettings, preferences, and content you create within a product (e.g., a watchlist, saved items) are stored in your personal database record. This data is accessible to you and to our internal systems that operate the service on your behalf. We may access it in limited circumstances to investigate abuse, resolve bugs, or comply with legal obligations.
- Usage StatisticsAnonymous, aggregated usage data (e.g., feature interactions, error rates) is used to improve our products. This data is never linked to your personal identity.
- Website AnalyticsOur website (madokaze.com) uses Vercel Analytics for anonymous page-view metrics. No cookies are used, and no personal data is collected or stored.
3. Data We Do NOT Collect
We do not collect your browsing history, keystrokes, passwords, payment card details, or data from web pages unrelated to our products. We do not build advertising profiles. We do not sell, rent, or share your personal data with any third party for marketing purposes. The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.
4. How We Use Your Data
- Providing the ServiceYour account data is used to authenticate you, sync your preferences, and deliver core product functionality.
- NotificationsIf you opt in, we may send email or push notifications related to activity within the product (e.g., price alerts, status updates). You can opt out at any time from within the product settings. Server-generated notifications (e.g., subscription status changes, payment failures) are stored temporarily in your account record and consumed by the extension on next launch.
- Billing & SubscriptionsFor paid features, we store your Razorpay subscription ID, subscription status timestamps (activation, cancellation, payment failure), tier expiry date, and internal idempotency keys in your account record to manage access to Pro features and prevent duplicate processing. Payment processing — including all card and bank details — is handled entirely by Razorpay. We never store or access your payment credentials.
- Product ImprovementAggregate, anonymous usage data helps us identify issues, improve performance, and prioritise new features.
- Legal ComplianceWe may disclose your personal data if required by applicable law, court order, or a lawful request from a government authority. We will notify you of such a request where legally permitted to do so.
5. Legal Basis for Processing
- ConsentAccount data (email, name, profile photo) is processed based on your explicit consent when you choose to sign in with Google.
- Contractual NecessityWatchlist, preferences, and subscription data are processed to deliver the service you have requested.
- Legitimate InterestsAnonymous usage statistics are processed to improve product quality. This does not override your privacy rights.
6. Third-Party Services
- Google FirebaseAuthentication, our Firestore database, and Cloud Functions are provided by Google Firebase. Data is stored in the asia-south1 (Mumbai) region. See Google's Privacy Policy at policies.google.com/privacy.
- RazorpaySubscription payments are processed by Razorpay. We never store your card or bank details. See Razorpay's Privacy Policy at razorpay.com/privacy.
- VercelOur website is hosted on Vercel. Anonymous site analytics are provided by Vercel Analytics.
7. Keeping Your Data Secure
We protect your data using the following measures:
- EncryptionAll data in transit between your device and our servers is encrypted via HTTPS/TLS.
- AuthenticationFirebase Authentication handles credential verification — we never store passwords.
- Database SecurityFirestore security rules restrict all read/write access to authenticated owners only.
- Payment IntegrityRazorpay webhook signatures are verified via HMAC-SHA256 before any data is processed.
8. Data Retention & Deletion
Your account data is retained for as long as your account is active. To request deletion of all your personal data, email us at support@madokaze.com with the subject line "Delete My Data". We will process your request within 30 days, in line with international data protection standards. Server-side search caches expire automatically within 12 hours and are not linked to your identity. Anonymous usage statistics are retained for up to 12 months.
9. Your Rights
You have the right to access, correct, or delete your personal data at any time. You can exercise many of these rights directly:
- Manage WatchlistYou can delete items from your watchlist directly in the extension.
- Unlink AccountYou can sign out and unlink your Google Account from the Profile page.
- Manage NotificationsYou can opt out of notifications from the Settings page.
- Full Data DeletionTo request complete deletion of all your personal data, email us at support@madokaze.com with the subject line "Delete My Data".
10. Children's Privacy
Our products are not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with data, contact us and we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. If changes are material, we will notify you via email or a prominent notice within the affected product before the changes take effect. If you do not agree with the updated policy, you should discontinue use and request account deletion by contacting support@madokaze.com. The "Last updated" date below reflects the most recent revision. This is version 2 of this policy (7 May 2026). Previous versions are available on request at support@madokaze.com.
12. Contact
For any questions, concerns, or data requests, contact us at support@madokaze.com. We aim to respond within 3 business days.
13. Governing Law
This Privacy Policy is governed by the laws of India. Any disputes arising in connection with this policy shall be subject to the exclusive jurisdiction of the courts of India.
PRODUCTS
Product-Specific Data Practices
Each MadoKaze product may collect or process data in ways specific to its functionality. Details for each active product are listed below.
GameScout
Chrome Extension
- Search QueriesGame titles you search are sent to our Cloud Functions (Google Cloud, asia-south1) to fetch real-time prices from Indian retailers. Queries may be cached server-side for up to 12 hours to reduce latency. Cached data is not linked to your identity.
- Price HistoryHistorical prices for games you track are stored locally on your device using chrome.storage. This data never leaves your device unless you are signed in, in which case your watchlist is synced to your private Firestore record.
- Local Storage (chrome.storage)The extension uses chrome.storage.local to cache search results, price history, preferences, and watchlist data on your device. This data does not leave your device unless you are signed in, in which case your watchlist is synced to your private Firestore record as described above.
- Crowdsourced PricesWhen you search for a game, the lowest price found is anonymously contributed to a shared database of historical lowest prices. This data contains only the price amount, store name, and date — no user identity is attached or derivable.
- Chrome Extension PermissionsGameScout requests: storage (local caching), identity (Google Sign-In), alarms (scheduled price checks), notifications (price drop alerts), offscreen (background scraping), tabs (opening buy links). Host permissions are limited to specific Indian retail stores we scrape. We have no access to arbitrary websites you browse.
- Google Search IntegrationA content script is injected on Google Search pages (google.com/search, google.co.in/search). It reads the search query from the URL parameter and checks it against a list of game-related keywords (ps5, ps4, xbox, nintendo, switch, game, disc, pre-owned). If a match is found, a price comparison widget is injected into the search results sidebar and the search query is automatically sent to the extension's background service worker to fetch prices. The query is not sent to any external server directly from the content script — it is processed locally by the extension, which then calls our Cloud Functions with the game title.
Questions? support@madokaze.com