Privacy Policy

Last updated: 26 March 2026

SpikeSaver is a privacy-first product. This policy covers both the spikesaver.com website and the SpikeSaver for Tesco Chrome extension.

Core Principle

The SpikeSaver Chrome extension stores all your data locally on your device and never transmits personal information to external servers. The website collects only anonymous analytics.

Website — What We Collect

Our website uses Vercel Analytics for privacy-friendly, anonymous page view tracking. We do not use cookies for tracking purposes. No personal data is collected through the website unless you voluntarily provide it (e.g. by subscribing to the newsletter or emailing us).

Chrome Extension — Information We Do Not Collect

The SpikeSaver Chrome extension does not collect: personal identification details, browsing history, search queries, IP addresses, device information, analytics data, or cookies. No information is sent to external servers.

Chrome Extension — Information Stored Locally

The extension stores the following data in Chrome Local Storage on your device only:

  • User preferences — nutrition goal presets, custom macro targets, display preferences, and caching choices. Retained until you clear data or uninstall the extension.
  • Product cache — Tesco product identifiers and parsed nutrition values. Automatically deleted after 24 hours.
  • Usage statistics — total and daily product analysis counts, displayed within the extension. Retained until manually reset or uninstalled.

This data is never sent externally, shared with third parties, used for advertising, or monetised.

Chrome Extension — Permissions Explained

  • storage — saves goals and preferences locally via the Chrome Storage API.
  • activeTab — reads the current Tesco product page to analyse ingredients and nutrition.
  • host_permissions (tesco.com) — allows the extension to run on Tesco grocery pages only.

The extension does not request access to browsing history, the tabs API, cookies, geolocation, or camera/microphone.

Data Security

All local data is encrypted via Chrome's secure Storage API and isolated from websites. The extension makes no external server connections, has no cloud syncing or telemetry, and works fully offline.

Third-Party Services

The Chrome extension uses no third-party services — no analytics platforms, error tracking, advertising networks, social integrations, or cloud storage.

The website uses Vercel Analytics (privacy-friendly, cookieless) and Klaviyo for email newsletters only.

Email Newsletter

If you subscribe to our newsletter, we store your email address via Klaviyo. You can unsubscribe at any time using the link in every email. We do not share your email with third parties.

Data Retention & Deletion

  • Product cache is automatically deleted after 24 hours.
  • Uninstalling the extension removes all locally stored data.
  • You can clear the product cache and reset statistics at any time via the extension settings.

Children's Privacy

SpikeSaver does not knowingly collect any information from anyone, including children under 13. Since no personal data is collected, there is no child privacy risk.

Compliance

  • GDPR — compliant by design. No personal data is collected by the extension, so no consent is required and no data is stored externally.
  • UK Data Protection Act 2018 — the same privacy-first approach applies.
  • CCPA — not applicable as no personal information is collected or shared.

Changes to This Policy

We may update this policy from time to time. Changes will be reflected in the “Last updated” date above. Significant changes may also be communicated through the extension.

Contact

For privacy questions, email contact@spikesaver.com.

SpikeSaver is not affiliated with or endorsed by Tesco.