Privacy Policy

Last updated: September 20, 2026

Introduction

Play Store ASO Tweak ("we", "our", or "us") adds an app store optimization (ASO) research panel to Google Play Store pages. This Privacy Policy explains exactly what the extension reads, what it stores on your device, what it sends to our servers, and who else receives data as a result of using it.

It describes the current published version of the extension. The extension runs only on https://play.google.com/store/* and has no user accounts, no sign-in, no advertising and no analytics or tracking SDKs.

Summary

  • The extension reads the content of the Google Play page you are viewing, on your device, to build the panel.
  • For some apps it sends that app's package ID (for example com.example.app) to our server to look up a release date or details of a removed app.
  • Our servers receive your IP address with those requests, as any web server does. One of them stores it, together with an approximate country, to enforce daily usage limits.
  • Preferences and counters are stored on your device only.
  • We never sell or share your data, and we do not build advertising or marketing profiles.

Google Play page content we read

When you open a Google Play app page, developer page or search results page, the extension reads the public content of that page — text, images, links and structured metadata such as the title, descriptions, category, version, install count, rating, monetisation details, declared ad networks, permissions, data safety declarations and the developer's published contact information.

This reading happens entirely in your browser and is used to render the panel, analyse keywords and prepare exports. Page content is never transmitted to us or to anyone else. We disclose it here because Chrome Web Store rules require extensions to disclose how they handle data even when that data never leaves your device.

Information sent to our servers

The extension contacts our own backend at taoufikmouadab.com in three situations. Each request contains only what is listed below — never page content, and never anything that identifies you personally.

  • Release date fallback. When Google Play does not publish an original release date for an app, the extension sends that app's package ID to /aso/releasedate/ and receives a date in return.
  • Removed apps. When an app page is unavailable, the extension sends that app's package ID to /aso/removed/api.php so the panel can still show basic information about the app.
  • Configuration. The extension downloads a small digitally signed configuration file from /aso/config/v1.json roughly every six hours. This request sends no data at all and no cookies.

Developer pages and search results contain many apps, so a single page view can result in several package IDs being looked up — one per app whose release date Google Play does not publish. Because a package ID identifies a Google Play page you are viewing, we treat this as browsing-related data and disclose it as such.

IP address and approximate country

Like every web server, our servers receive the IP address your request comes from. How each service handles it differs:

  • Release date service. Your IP address is converted into a salted, irreversible hash and used only as a daily counter key to prevent abuse. The address itself is never written to disk, and the counters are deleted once the day has passed.
  • Removed apps service. Your IP address is stored, together with a salted hash of it, an approximate country derived from it, and the first and last time it was seen. This is used to enforce a daily request limit and to detect abuse. These records are kept for up to 35 days; request logs are kept for up to 30 days.

To determine the approximate country, that service sends the IP address to one of two third-party geolocation providers — GeoJS, and FreeIPAPI only if the first returns no usable result. This lookup happens at most once per address per day. No other information is sent to them, and the country is used only for abuse prevention and aggregate usage statistics — never to target or profile you.

Information stored on your device

The extension uses Chrome's local storage (chrome.storage.local) for the following, all of which stay on your device and are never transmitted:

  • Whether the panel is currently shown, and whether that choice should be remembered.
  • Counters of how often you have used the extension — how many app pages and developer pages it has run on, how many exports you have made, and which days it was active. These decide when an occasional "support the project" message is shown, and when you dismiss or opt out of that message.
  • The most recent signed configuration file and the highest configuration version already seen.

Removing the extension deletes all of it. We disclose the usage counters as activity data because they record your use of the extension, even though they never leave your browser.

Requests to other websites

Some features cause your browser to contact sites other than Google Play and ourselves. In each case the request carries no information about you beyond what any ordinary web request reveals, such as your IP address and browser version:

  • app-ads.txt. To show a developer's declared ad networks, the extension requests the public app-ads.txt file from the developer's own website, which Google Play publishes on the listing. The request is a plain download with no cookies, and only the file's text is read.
  • Google Play images. When you export a listing's assets, the extension downloads that listing's public images from Google's image hosts in order to place them in the file you are saving.
  • YouTube. If a listing has a promo video, its thumbnail is loaded from YouTube's image host, and opening the video embeds YouTube's standard player. YouTube receives that request and may set its own cookies, under Google's privacy policy.
  • Links you click. The panel contains links to external ASO and APK reference sites, and to our own localisation checker. Nothing is sent to those sites unless you choose to click through to them.

Exports and clipboard

The export buttons collect a listing's public data and images into a file that is built inside your browser and saved to your own device. Nothing from an export is uploaded to us or to anyone else. Copy buttons write a single value, such as a package name or a developer's published email address, to your clipboard when you click them. The extension never reads your clipboard.

Permissions we request

  • storage — to keep the preferences, counters and configuration described above on your device.
  • alarms — to re-check the signed configuration file about every six hours.
  • clipboardWrite — to let the copy buttons place a value on your clipboard.
  • offscreen — to assemble export files in the background without interrupting the page.
  • Access to play.google.com — the only site the extension runs on and reads.
  • Access to Google's image hosts — to fetch a listing's public images during an export.
  • Access to other websites — required because a developer's app-ads.txt file can be on any domain, which is only known when you open the listing, and to reach our own services described above. No content script runs on any site other than Google Play.

Remote code

The extension does not download or run remote code. All of its program code ships inside the published package. The only file it downloads at runtime is the configuration file, which contains feature on/off switches and version numbers; it is verified against a digital signature before use and is never executed.

What we never collect

We do not collect your name, email address, passwords or any account credentials, payment or financial information, health information, personal communications, form entries, precise location, or your general browsing history outside Google Play. The extension has no access to your browser history, your bookmarks, your tabs on other sites, or your keystrokes, clicks or mouse movements.

How we use and share data

Data is used only to provide the features described here. We do not sell or transfer data to third parties, we do not use or transfer it for any purpose unrelated to the extension's single purpose, and we do not use it to determine creditworthiness or for lending purposes. The only third parties that receive anything are the geolocation providers named above, the websites you knowingly interact with (Google Play, a developer's own site for app-ads.txt, YouTube for promo videos), and our hosting provider, which operates our servers on our behalf.

Retention

  • Daily request counters on the release date service: deleted once the day has passed.
  • IP records on the removed apps service: up to 35 days.
  • Server request logs: up to 30 days.
  • Cached release dates and removed app details: these describe apps, not people, and are kept while they remain useful.
  • Data on your device: until you remove it or uninstall the extension.

Your choices

You can switch the panel off at any time from the extension's toolbar button, which stops it from reading pages. Uninstalling the extension removes everything it has stored on your device. If you would like the records associated with your IP address removed from our servers, contact us at the address below and we will delete them.

Children

The extension is a professional research tool for app developers and marketers. It is not directed at children and we do not knowingly collect information from them.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in the extension or in legal requirements. The updated policy will be posted on this page with a revised "Last updated" date. Material changes to how data is handled will also be reflected in the extension's store listings.

Contact Us

If you have any questions about this Privacy Policy or about the data described here, please contact us: