Privacy Policy
1. Who we are
DC Inside Exporter (“we”, “us”) is a Chrome browser extension, together with this website and a licensing service, operated by Creole AI, a sole proprietorship of Muhuan Li based in Hong Kong (“Company”). The extension lets you export posts from a DC Inside gallery that you can already open in your own browser. For privacy questions or requests, email dcx@creoleai.com.
DC Inside Exporter is independent software. It is not affiliated with, endorsed by, sponsored by or connected to DC Inside or its operators. “DC Inside” and related marks are trademarks of their owners and are used only to describe what the extension works with.
Summary
- Gallery posts stay on your device. They are fetched into your browser and exported locally. We never receive post content.
- Our servers only handle account and licensing data: Google sign-in details (email, name, Google account ID), a random device ID, the plan you bought, and usage counters used to enforce plan limits (no post content).
- We do not sell personal data, show ads, or use analytics/telemetry/tracking in the extension or on this website.
2. What stays on your device
When you export, the extension requests list/detail/comment data for the gallery and date range you chose, using your browser session with DC Inside. Exported posts, comments and download files are stored only on your device (and in temporary extension storage as needed for the job) and are never uploaded to us. Uninstalling the extension removes its stored data; downloaded files are yours.
3. What we collect on our servers
The extension contacts our licensing service only for sign-in, plan checks, purchases and allowances. No gallery content, post titles, author names or DC Inside credentials are included.
- Google account data (if you sign in): account id, verified email, display name (
openid email profile) — to create your account and attach a plan. - Device data: random device ID and a hash of a device secret — to authenticate your installation.
- Session / entitlement: session token hash, plan token metadata, paid-until / tier.
- Usage counters: export-job counts and caps for your plan — no content.
- Order records: order id, plan, amount, Paddle identifiers, refund/subscription status. We do not receive your card number.
- Technical data: IP and request metadata briefly for rate-limits; Cloudflare may keep standard logs ~30 days.
We do not collect: post bodies or attachments; DC Inside passwords or session secrets; browsing history outside the gallery pages the extension runs on; advertising or crash-report analytics. This website does not set first-party analytics cookies. Paddle’s checkout may set its own cookies.
4. Legal bases and use
We use the data above only to provide, secure and bill for the service (contract; legitimate interests for security/abuse; legal obligation for tax/accounting; consent for Google sign-in). We do not sell personal data or use it for advertising or credit decisions.
5. Payments
Paid plans are sold by Paddle.com Market Limited as merchant of record. Checkout is on a Paddle-powered page. See Paddle’s privacy notice. We receive order/plan/subscription status to activate or revoke access.
6. Sharing
We share data only with Paddle (payments), Google (sign-in), Cloudflare (hosting), and authorities/advisers where required by law. Some processing may occur outside your country under appropriate safeguards.
7. Retention
- On your device: until you clear it or uninstall.
- Account/device/session/allowance: while active, then deleted or anonymized within one month of a deletion request; sessions expire after 7 days.
- Order/billing: as tax/accounting law requires.
- Technical logs: ~30 days.
8. Your rights
Depending on where you live (including Hong Kong PDPO Cap. 486, GDPR/UK GDPR), you may access, correct, delete, restrict or port personal data, object, or withdraw consent. To delete your account and server-side data, email dcx@creoleai.com from your account email. We respond within one month (or as required by law). You may also sign out, clear local data, revoke access in Google permissions, or uninstall. You may complain to your local authority.
9. Security
HTTPS; hashed device secrets/session tokens; signed plan tokens; Google OAuth with PKCE; signed Paddle webhooks. No system is perfectly secure; we will notify as required if a breach affects personal data.
10. Other people’s content
Exports may include other people’s posts. You decide what to export and are responsible for lawful access, storage and sharing. Using unofficial tools with DC Inside may be restricted by that platform’s terms; see our Terms.
11. Children
Not directed to children under 16. Contact us to delete data if a child provided it.
12. Chrome Web Store / Google Limited Use
Use of Google API information adheres to the Chrome Web Store User Data Policy and Google API Services User Data Policy (Limited Use). We use Google account info only for sign-in and licensing; we do not sell it, use it for ads, or use gallery content to train ML models.
13. Changes
Updates will be posted here with a new “Last updated” date. Material changes will be notified in the extension or by email before taking effect.
14. Contact
Creole AI, a sole proprietorship of Muhuan Li, UNIT 1713, 12TH FLOOR, THE L.PLAZA, 367-375 QUEEN’S ROAD CENTRAL, SHEUNG WAN, HONG KONG · dcx@creoleai.com.