Privacy Policy

SpikeSaver for Tesco — Chrome Extension • Version 5.0.0 • Last updated: 11 February 2026

Introduction

SpikeSaver (“we”, “our”, or “the extension”) is committed to protecting your privacy. This Privacy Policy explains how SpikeSaver handles your information when you use our Chrome extension for nutrition analysis on Tesco product pages.

Information We DO NOT Collect

SpikeSaver does not collect, store, or transmit:

• Personal identification information (name, email, address)
• Browsing history or browsing patterns
• Product search queries or purchase history
• IP addresses or location data
• Device information or browser fingerprints
• Analytics or tracking data
• Cookies or tracking technologies
• Any data to external servers

Information Stored Locally

SpikeSaver stores the following information locally on your device only using Chrome’s Storage API:

1. User Preferences

• Nutrition Goals: Your selected goal preset (Balanced, Low-Sugar, Low-Carb, Weight Loss, Custom)
• Custom Macro Targets: Your personalised daily nutrition targets (if using Custom mode)
• Advanced Settings: Custom threshold values (if Advanced Mode is enabled)
• Display Preferences: Badge display settings, caching preferences

Purpose: To personalise nutrition analysis according to your health goals
Storage Location: Chrome Local Storage (on your device)
Retention: Until you clear extension data or uninstall

2. Product Cache

• Product ID: Tesco product identifier (numeric ID from URL)
• Nutrition Data: Parsed macro values (carbs, protein, fat, etc.)
• Cached Timestamp: Date when product was cached

Purpose: To improve performance and reduce parsing overhead
Storage Location: Chrome Local Storage (on your device)
Retention: 24 hours, then automatically deleted

3. Statistics

• Products Analysed Count: Total number of products analysed
• Daily Count: Number of products analysed today

Purpose: To show you your usage statistics
Storage Location: Chrome Local Storage (on your device)
Retention: Until you manually reset statistics or uninstall

How Your Data is Used

All data stored by SpikeSaver remains on your device and is used exclusively for:

1. Nutrition Analysis: Comparing product macros against your personalised goals
2. Performance: Caching products to avoid re-parsing (24h expiry)
3. Personalisation: Remembering your goal settings across sessions
4. Statistics: Showing you how many products you’ve analysed

Your data is never:

• Sent to external servers
• Shared with third parties
• Used for advertising or tracking
• Sold or monetised in any way

Permissions Explained

storage

Why: To save your nutrition goals, preferences, and product cache locally on your device
What We Access: Only Chrome Local Storage API
What We DON’T Access: Your browsing history, passwords, or any other Chrome data

activeTab

Why: To analyse nutrition information on the current Tesco product page you’re viewing
What We Access: Only the HTML content of Tesco product pages when you visit them
What We DON’T Access: Content from other websites or tabs

host_permissions (tesco.com/groceries/*)

Why: To inject our content script into Tesco product pages for real-time analysis
What We Access: Only Tesco grocery product pages
What We DON’T Access: Any other Tesco pages or other websites

We request minimal permissions — only what’s necessary for core functionality. We do not request permissions for browsing history, tabs API, web request API, cookies, geolocation, or microphone/camera.

Data Security

Local Storage Security

• All data is stored using Chrome’s secure Storage API
• Data is isolated to the extension and cannot be accessed by websites
• Data is encrypted by Chrome’s built-in storage encryption
• No network transmission of your personal data

No External Servers

• SpikeSaver does not connect to any external servers
• No data is uploaded, synced, or backed up to the cloud
• No telemetry or error reporting to external services
• Complete offline functionality

Third-Party Services

SpikeSaver does not use any third-party services, including:

• Analytics platforms (Google Analytics, etc.)
• Error tracking services (Sentry, etc.)
• Advertising networks
• Social media integrations
• Payment processors (SpikeSaver is free)
• Cloud storage or sync services

The only external service you interact with is Tesco’s website, which has its own privacy policy. SpikeSaver does not modify, intercept, or transmit your interactions with Tesco.

Data Retention and Deletion

Automatic Deletion

• Product Cache: Automatically deleted after 24 hours
• Uninstall: All data is automatically deleted when you uninstall the extension

Manual Deletion

You can delete your data at any time:

1. Clear Product Cache: Open SpikeSaver settings (click extension icon > Settings) > Preferences tab > Click “Clear Product Cache”
2. Reset Statistics: Open SpikeSaver settings > Preferences tab > Click “Reset Statistics”
3. Delete All Extension Data: Go to chrome://extensions/, find SpikeSaver, click “Remove” — all local data is permanently deleted

Children’s Privacy

SpikeSaver does not knowingly collect any information from anyone, including children under 13. Since we don’t collect any data at all, there is no risk to children’s privacy.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Updating the “Last Updated” date at the top of this policy
• Posting a notice in the extension (for material changes)
• Requiring acceptance before using new versions (for significant changes)

Your continued use of SpikeSaver after changes constitutes acceptance of the updated policy.

Compliance

GDPR (EU General Data Protection Regulation)

SpikeSaver is GDPR-compliant by design:

• No personal data collection (no data controller/processor relationship)
• No consent required (no data processing)
• No data breach risk (no data stored externally)
• Right to deletion (uninstall removes all data)
• Data portability (all data is local to your device)

UK Data Protection Act 2018

SpikeSaver complies with UK data protection laws through the same privacy-first design.

California Consumer Privacy Act (CCPA)

SpikeSaver does not collect, sell, or share personal information, making CCPA requirements inapplicable.

Open Source Transparency

SpikeSaver’s code is available for review at github.com/colin123456/spikesaver-tesco. You can verify:

• No external server connections in the code
• All data storage uses Chrome Local Storage API only
• No analytics or tracking libraries included
• No obfuscated or hidden functionality

Your Rights

Since SpikeSaver does not collect any personal data, traditional data rights (access, rectification, erasure, etc.) are not applicable. However, you always have:

• Full Control: All settings and data are on your device
• Transparency: Open source code for verification
• Deletion: Uninstall to remove all data instantly
• Privacy: Zero tracking or surveillance

Contact

If you have questions or concerns about this Privacy Policy or how SpikeSaver handles data:

GitHub Issues: github.com/colin123456/spikesaver-tesco/issues

For questions about Tesco’s data practices, please refer to Tesco’s Privacy Policy.