Privacy policy

Last updated: November 2, 2026

Sip, Kitty! is a Chrome water-reminder extension and website operated by Vedant Bhandare in India. This policy describes the information used to provide reminders, Google sign-in, free trials and paid access. Trial and regional-pricing features apply to extension versions that include them.

Google sign-in and account access

When you sign in, Google and Supabase process your Google account identifier, email address and verification status, and profile information Google supplies, such as your display name and profile image. Supabase assigns an account identifier. We use this information to authenticate you, associate purchase access with your account, and restore access on another device. We do not receive your Google password or request access to your Gmail messages, Google Drive files, contacts or calendar.

Trials and demos without signup

In version 1.1.6, completing Kitty’s introduction in variant A starts a three-day trial; variant B offers an interactive demo instead. Trial start and expiry are stored in the extension’s local installation storage. Trials work offline and keep the same deadline across restarts and updates. Existing trial deadlines, including earlier seven-day trials, are preserved. Uninstalling and reinstalling, or clearing local storage, may grant a fresh trial. No account or Chrome profile lookup is needed for a trial or demo. The experiment telemetry described below records trial milestones and activity. Google sign-in is requested separately for lifetime access or restoration.

Older published versions may still use server trial records and trial identifiers. Their compatibility service remains available while needed by those versions. These legacy identifiers will be removed in a separate retirement step after that compatibility is no longer needed; the new version does not contact that service.

Experience comparison and pricing in version 1.1.6

New installations are randomly assigned equally between two experiences. Variant A offers a three-day local trial and pay-what-you-want lifetime access, including a zero-price option after Google sign-in. Variant B offers a short interactive demo followed by fixed lifetime pricing of ₹319 in India or US$12.99 in the USD region. These fixed prices apply only to variant B. Both variants provide the same Kitty features, with no subscription. Existing installations keep their current trial and lifetime access. The assignment stays the same across restarts and updates and may reset after reinstalling.

To measure this comparison, the extension generates a random identifier for the current installation and sends its A/B group, assignment time, extension version, onboarding/demo, trial, sign-in and checkout milestones to a Cloudflare Worker with D1 storage. During a trial, opening Kitty or interacting with a reminder records activity at most once per trial day. Day 1 includes completing onboarding. Offline events are queued locally and retried. Free lifetime grants are measured separately from confirmed payments.

Our payment server sends confirmed payment, refund and dispute events to Cloudflare, with the installation identifier when available, pricing region, amount and time. Payment references are hashed before storage in D1. We do not send account emails, names, sign-in tokens, card details, page contents, browsing history or full page URLs to this telemetry service. Cloudflare processes network information to serve requests; our telemetry database does not store IP addresses. Telemetry records remain until the experiment data is deleted after analysis. This identifier is for measuring the experiment, not for recognizing reinstalls or enforcing trial eligibility.

Regional pricing

For regional pricing, the extension sends your device’s time-zone identifier to our backend. We use an existing account country, a country supplied by the request infrastructure when available, or a time-zone hint to select the pricing region and currency. We store the resolved country and its source when available. This is an approximate regional choice, not precise GPS location or proof of residence.

Payments and purchase records

After successful sign-in, our backend stores the account’s experiment assignment, free lifetime grants where applicable, and checkout-attempt information needed to resume checkout and avoid duplicate attempts. Cancelling sign-in before it succeeds discards the selected contribution; reopening the flow starts with a fresh selection.

Dodo Payments provides hosted checkout and processes billing information, payment details, taxes, fraud checks, refunds and disputes. When you start checkout, we send Dodo your account email, name when available, account identifier, selected amount and currency, product information and pricing region. For Indian checkouts, we also set the billing country to India. You provide additional billing or payment details directly in Dodo’s checkout.

Our backend receives payment confirmations and retains records needed to manage access, including payment, customer and product identifiers, account email and identifier, amount, purchase time, payment status, and refund or dispute information. The extension and our account database do not store your full card number, bank credentials or UPI PIN. Dodo and its payment partners handle payment-method details under their own policies.

Information stored in Chrome

The extension uses Chrome storage for reminder preferences, temporary reminder state, onboarding progress, installation-local trial dates, sign-in session tokens, cached paid-access status and pending-checkout recovery information. Existing usable local trial deadlines are preserved; completed unpaid installations without one receive a fresh seven-day local trial once on migration. Reminder preferences use Chrome’s sync storage and may sync through your Chrome account. Trial dates, sign-in and access data use extension-local storage. Signing out clears the saved session and paid-access cache, while leaving the local trial deadline in place; it does not delete server-side account or purchase records.

Web pages and reminders

The extension accesses ordinary HTTP and HTTPS pages to display the kitty, preview reminders and coordinate dismissal across open tabs. It uses Chrome alarms and notifications for reminders. It does not send page contents, URLs, browsing history or pointer movements to our account or payment services. Pointer movement used for kitty animation is processed locally. We do not use browsing activity for advertising, profiling or analytics.

This website and service requests

This website is hosted by Cloudflare Pages. The landing page uses Google Analytics (measurement ID G-GK8SZKTMR4) to understand visits and interactions. Google Analytics may use cookies and process information such as page URLs, referring pages, browser and device details, and interactions with the site. This website analytics tag is separate from the extension; it does not receive the extension’s local trial dates, Google sign-in details or purchase records from our code. See Google’s privacy policy for its handling of information. You can block analytics through browser settings or privacy tools.

The optional uninstall feedback page sends only the reason you select and any note you write to our Supabase database. It does not include our Google Analytics tag, request login, or send extension identifiers, account details or browsing history. We use the responses to improve Kitty. The page does not send feedback when you choose “No thanks.” To ask us about deletion of a response, contact us below; because responses have no account identifier, we may be unable to locate a specific anonymous response.

Cloudflare and the providers serving feedback, sign-in, account and checkout requests may process IP addresses, browser details, timestamps and service logs to deliver, secure and operate their services. Clicking a store link opens the Chrome Web Store; clicking an email link opens your email application.

How information is used and shared

We use information to provide the features described above, verify purchases, prevent payment abuse, resolve support requests and handle refunds or disputes. Google provides authentication and Chrome services; Supabase provides account and database services; Dodo Payments provides checkout and payment services; Cloudflare hosts the website. Relevant information is shared with these providers to perform those functions. They may process information outside your country under their applicable policies. If you contact support, we process the email address, message and purchase reference you choose to send.

We do not sell personal information, use it for personalized advertising, or share it for unrelated marketing. We may disclose information where required by applicable law or to address fraud, security incidents or legal claims.

Limited Use

Sip, Kitty!’s use of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements. Our handling of extension user data also follows the Chrome Web Store User Data Policy, including Limited Use restrictions. Data is used for the disclosed user-facing features and related security and support purposes.

Retention, deletion and your choices

Account and entitlement records are retained while needed to operate account access and restore purchases. Legacy server trial records are retained only while older-version compatibility remains needed, followed by separate retirement and identifier deletion. Purchase and related support records may be retained for accounting, refunds, disputes, fraud prevention and applicable legal obligations. There is no single fixed retention period for all records; the purpose and applicable obligations determine how long they are needed. Providers may retain their own transaction and operational records under their policies.

You can change reminder settings, pause reminders, sign out or uninstall the extension. Uninstalling does not automatically delete server-side trial, account or payment records. The new local trial dates are removed when Chrome removes installation storage. Legacy trial identifiers remain pending the compatibility retirement described above. To request access, correction or deletion, email the address below. For signed-in accounts, use the associated email; for a guest trial, explain that you have no account so we can help identify the relevant record. We may need additional information to locate a pseudonymous record and verify the request. We will explain any records that must be retained and any effect of deletion on restoring paid access. Deleting an account does not automatically issue a refund.

Security

Authentication, account and checkout requests use HTTPS. Administrative database credentials and payment API keys are kept server-side. The backend verifies user authentication and payment webhook signatures before updating access. These measures reduce risk, but no service can guarantee absolute security.

Contact and policy updates

Contact Vedant Bhandare at vedantbhandare123@gmail.com for privacy questions or data requests. Please do not send passwords, session tokens, full card details or UPI PINs. Changes to this policy will be published here with an updated date.