Chrome Backup & Restore — Transparent protection for your data
Extension: Chrome Backup & Restore ·
Extension ID: ehelpggmjfhcaodidoejgikogopajfli
Effective date: 17 April 2026 · Last updated: 17 April 2026 · Version: 2.0.0.0
This document explains what data the "Chrome Backup & Restore" extension collects, how it is used, who it is shared with, how long it is kept, and your rights. By installing or using the extension you agree to this Privacy Policy and the Terms of Use below.
Contact: litextools@gmail.com
The extension is local-first. Nothing leaves your device unless you explicitly trigger a cloud action (Login, Cloud Sync, Upload, or Share).
We use data only for the following purposes, consistent with the Chrome Web Store Limited Use policy:
We do not sell your data, use it for advertising, transfer it to data brokers, or allow humans to read it except with your consent, for security, or as required by law.
| Provider | Role | Data shared | Privacy policy |
|---|---|---|---|
| Cloudflare, Inc. | API hosting (Workers), encrypted backup storage (R2), database (D1), KV cache | Encrypted payloads, account metadata, request logs | Link |
| Google LLC | Chrome Identity / OAuth sign-in | Email, Google account ID, name, picture (if available) | Link |
| Lemon Squeezy, LLC | Payment processing, invoicing, subscription management | Email, billing details (we never see your card) | Link |
Your data may be stored or processed outside your country of residence.
All API traffic uses HTTPS (TLS 1.2+). Backup payloads are encrypted at rest using AES-256-GCM. Authentication uses short-lived Google OAuth tokens verified server-side. Payment webhooks are verified with HMAC-SHA256 signatures. Per-IP and per-license rate limits prevent abuse.
The encryption key for server-side data is held by the service operator. The operator has the technical ability to decrypt stored backups if compelled by law or required for recovery/debugging. If zero-knowledge encryption is a hard requirement, do not use the cloud sync feature. Local-only backups never leave your device.
No online service can guarantee perfect security. In the event of a confirmed data breach, we will notify affected users by email without undue delay.
| Data | Location | Retention |
|---|---|---|
| Local backups, device ID, settings | Your browser | Until you delete them or uninstall the extension |
| Cloud backups — free users | Cloudflare R2 | Until you delete them in-app or email us |
| Cloud backups — paid users | Cloudflare R2 | Kept for 90 days after subscription expiry. Older backups over the limit are auto-deleted. |
| Request / abuse logs | Cloudflare | Up to 30 days |
| Billing records | LemonSqueezy | As required by tax & commercial law (typically 5–10 years) |
Uninstalling removes local backups and the device ID from that device. It does not delete your cloud backups. To remove cloud data, sign in and delete your backups first, or email litextools@gmail.com.
Depending on where you live (GDPR, CCPA/CPRA, PDPL, LGPD, PIPEDA, APPI, and similar laws), you have some or all of the following rights:
To exercise any right, email litextools@gmail.com. We respond within 30 days.
The extension is not directed at children under 13 (or under 16 in the EEA/UK). We do not knowingly collect personal data from children. If you believe a child has provided us with data, email us and we will delete it promptly.
We may update this policy to reflect changes in the service or applicable law. When we do, we update the "Last updated" date at the top. Material changes are highlighted within the extension on the next launch. Continued use after changes means you accept the new version.