Privacy Policy
YPA Student Discounts Extension · Last updated: July 13, 2026
YPA Student Discounts (“the Extension”) is developed by Young People's Alliance (“we,” “us,” “our”). This policy explains what information the Extension collects, why, and how it's used.
What We Collect
Account information.
When you sign in, we collect the email address and password you provide. Authentication is handled by our backend (Supabase); your password is never stored by the Extension itself. We store your session token locally in your browser (chrome.storage.local) so you stay signed in.
Website domains you visit.
To check whether student discount codes are available for a site, the Extension sends the domain (e.g. example.com) of pages you visit to our server while you are signed in. We do not collect full URLs, page content, or browsing history: only the domain, and only to look up matching codes.
Discount code outcomes.
When the Extension automatically applies a discount code at checkout, it reports back to our server whether that specific code succeeded or failed. This is tied to your account so we can keep our code database accurate. We do not collect cart contents, order totals, payment details, or any other checkout information.
What We Do NOT Collect
- Payment card numbers, billing addresses, or other payment credentials
- Full browsing history or page content beyond domain names
- Personal information typed into forms, other than the promo code field we auto-fill
- Any data when you are signed out (no domain lookups or reporting occur while logged out)
How We Use Information
- To authenticate your account and keep you signed in
- To match your visits to available student discount codes for that site
- To improve the accuracy of our discount code database based on success/failure reports
We do not sell your data, and we do not use it for advertising or share it with third parties for marketing purposes.
Third-Party Services
We use Supabase to handle authentication and store account/session data securely. Supabase processes this data on our behalf under its own security and privacy practices.
Data Retention & Deletion
Your account data is retained while your account is active. You can request deletion of your account and associated data at any time by contacting us at privacy@youngpeoplesalliance.org. Signing out clears your locally stored session token from your browser.
Data Security
We use industry-standard measures (encrypted connections, token-based authentication) to protect your information in transit and at rest.
Changes to This Policy
We may update this policy as the Extension evolves. Material changes will be reflected here with an updated “Last updated” date.
Contact Us
Questions about this policy or your data? Contact us at privacy@youngpeoplesalliance.org.