Browser extension privacy policy

Effective 29 October 2026 · Applies to SoloCruz – Find a Cabin Mate, versions 1.0.0–1.0.2 in Google Chrome and Microsoft Edge

The SoloCruz extension helps you read a cruise itinerary you choose, find related cabin-mate listings and prepare an editable listing draft. It does not publish an announcement automatically.

Who operates the extension

SoloCruz is operated by YAS SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, ul. Szlak 77/222, 31-153 Kraków, Poland; KRS 0001166122, NIP 6793327784, REGON 541401303. Contact [email protected] for support or privacy requests.

What the extension reads and sends

• The cruise page you select. After you open SoloCruz, sign in, agree to the page-analysis disclosure and press “Find a cabin mate”, the extension reads the selected page’s URL, title, bounded visible text, selected public metadata and structured cruise data. It sends this information over HTTPS to SoloCruz to extract itinerary details and look for related listings.
• AI processing. The SoloCruz server sends the relevant page text and cruise information to Google’s Gemini API for extraction. Google processes this request under the applicable Gemini API terms, including its provider retention and data-processing provisions. We do not send your SoloCruz password or extension access token to Gemini. AI output may be incomplete or incorrect; you must review it.
• Sign-in. You enter credentials only on the SoloCruz website or the Google sign-in service. The extension receives a one-time code and then an access token to authorize its SoloCruz API requests. It does not read your website password, browser cookies or password manager.
• Your draft. Choosing “Continue to review” sends the selected source URL and extracted cruise fields to SoloCruz to create a private draft associated with your account. You edit and decide whether to publish it on the website.
• Technical information. Normal server requests may record IP address, request time, browser/network information and security errors for operation and abuse prevention, as explained in the website privacy policy.

Use public cruise itinerary pages. Input, textarea, select and editable-field contents, hidden text, navigation and footer text are excluded from the visible-text extraction pass. Page metadata and structured data can still contain personal information supplied by the page itself. Do not scan account, checkout, message, medical, financial or other confidential pages.

When access occurs

The extension uses the browser’s temporary active-tab access. It has no automatic content scripts and does not scan tabs or browsing history in the background. Closing the popup without starting an analysis does not send the page’s contents. Signing in does not itself start a page analysis. A changed source URL requires a new confirmation. In version 1.0.2, sign-in and an analysis you explicitly start can continue in the extension’s background worker when the popup closes. Reopening the popup restores the operation status or recent result.

Storage and deletion

• The access token is stored in the browser’s local extension storage until you disconnect, uninstall the extension or clear its data. The server currently issues tokens for 30 days; disconnecting removes the browser’s copy but does not immediately revoke a token already issued by the server.
• The source URL, extracted result fields and temporary operation status are held in browser session storage so a recent result can be restored for the same page within 30 minutes. An expired result is removed when revisited; disconnecting clears session results, and the browser clears session storage when the browser session ends. The extension does not cache the raw page text.
• The page content is processed for the extraction request; the importer does not save a raw page snapshot as part of the listing. Google’s provider-side retention rules apply to its processing. Website drafts, account records and operational logs are retained under the website privacy policy. Delete drafts and your account using SoloCruz account controls, or contact us for help.

Use and sharing limitations

We use extension data to provide the requested sign-in, cruise analysis, matching and draft features and to maintain their security. We do not sell extension data, use it for advertising, or transfer it for purposes unrelated to these features. The extension includes no advertising or analytics SDK. The separately opened SoloCruz website may offer optional analytics under its own cookie choices. Publishing a listing makes the listing information public under the website’s terms; opening a draft does not.

Your choices and rights

You can decline analysis, close the extension, disconnect or uninstall it. You can request access, correction or deletion of your personal data by emailing [email protected]. Depending on the applicable legal basis, other rights described in the website privacy policy may apply, including restriction, objection, portability and a complaint to the Polish supervisory authority (UODO) or your local authority. The website privacy policy also describes international transfers and safeguards.