Legal

Privacy Policy

Last updated: August 10, 2026 · Effective: August 10, 2026

Wuz Cart (the "Service") is operated by Wuz LLC ("we," "us," or "our"), a Pennsylvania limited liability company. Wuz Cart is a Chrome browser extension that helps you see and manage the shopping carts you've started across different shops. This policy describes what Wuz Cart does and doesn't do with your information.

The short version

• Wuz Cart runs entirely in your browser and needs no server to do its job. By default, nothing about your shopping ever leaves your device.
• Your cart contents, the shops you visit, and your browsing history are never sent to us or to anyone else.
• We have no user accounts and run no analytics by default. The only things that ever reach our server are the optional sharing features you choose to turn on — and even then only anonymized, hashed data (Sections 4a–4c).
• If you join our waitlist with your email address, that email is the only thing we collect, and it's used only to tell you when Wuz Cart ships.
• You can uninstall the extension at any time. All data goes with it.

1. What Wuz Cart stores, and where

Wuz Cart stores everything it needs to operate inside Chrome's built-in extension storage (chrome.storage.local). That storage lives on your computer. It is not synced to any server we operate, and we have no way to read it.

The kinds of things stored locally include:

• Cart records (titles, prices, quantities, images) from shops you've tracked
• The list of shops you've explicitly tracked or ignored
• Your settings (notification preferences, sort order, etc.)
• A local price history for items in your tracked carts, so we can show drops over time

2. What Wuz Cart does not collect

• We do not collect your browsing history.
• We do not collect your name, address, payment information, or any account credentials.
• We do not run analytics, advertising trackers, or any telemetry that is on by default. Nothing about your shopping is shared with us unless you turn it on: a problem report you send one at a time (Section 4), plus the optional, off-by-default sharing features in Settings (Sections 4a–4c), are the only ways your cart or shopping data is ever sent to Wuz Cart — and every one of those is anonymized and hashed. (Separately, checking a price means asking the shop’s own page for it — see Section 3.)
• We do not use cookies, fingerprinting, or local storage for tracking on this website.
• We do not run third-party analytics, advertising trackers, or session-replay tools.
• We do not sell, rent, license, or otherwise disclose personal information to third parties for monetary or other valuable consideration.

3. Permissions the extension requests, and why

Chrome shows a list of permissions when you install Wuz Cart. Each one maps to a specific feature of the extension:

• storage — to save your tracked carts and settings locally.
• tabs — to open a cart page in a background tab when you click "Refresh," and to identify which shop you're currently viewing.
• scripting — to read your cart on shops you've tracked.
• activeTab — to scan the current shop when you click Wuz Cart in the toolbar.
• alarms — to run a daily price check on items in your tracked carts. This asks the shop’s own product page for its current price, logged out and anonymously: no cookies, no account, and nothing identifying you. It tells the shop nothing except that someone looked at a public page, and it never sends anything to us.
• favicon — to show each cart's shop icon using Chrome's own local icon cache. No network request, and nothing about which shops you track leaves your browser.
• host permissions for specific shops — Chrome shows these as a list. Each one corresponds to a shop you've explicitly chosen to track. You can revoke any of them from Wuz Cart's Privacy & Access screen.
• optional "Allow on every shop" — only granted if you turn on the all-sites toggle. Lets Wuz Cart notice carts on shops you haven't yet tracked. Off by default.

Code that runs on every page

We want to be exact about this, because the permission list alone does not show it. Wuz Cart ships ten small scripts that Chrome runs on every website you open, not only on shops you have tracked. They are declared in the extension's manifest, so they are visible to anyone who inspects it, and they run whether or not the all-sites setting is on.

Their entire job is to notice that a shopping cart is present, and to read it:

• Six of them watch the page itself — the overlay that offers to add a cart it recognises, plus readers for shops built on Ecwid, Payhip, Squarespace and Oracle Commerce, which cannot be recognised any other way.
• Four of them wrap the page's own network functions so Wuz Cart can see a cart the site loads after the page opens. They observe the shop's replies to the shop's own requests. They do not create requests, redirect them, or alter them.

None of these scripts send anything anywhere. What they read stays in your browser's local storage on your own device.

To find a cart, they do have to look at the page — its text and layout — the same way you do when you glance at a page and see whether there is a basket on it. We would rather say that plainly than imply they are more blinkered than they are. What they never do is collect it: the only form fields they read are the quantity box and the size or colour dropdown inside a cart row, and the only thing kept is the cart itself — item names, prices, quantities, and the shop's own total. Passwords, logins, payment fields, addresses, and search or message boxes are never read. On a page with no cart, nothing is kept at all. Nothing reaches us unless you later turn on one of the sharing settings in section 4 and press Send yourself.

4. Reporting a problem (you choose, every time)

Wuz Cart runs no analytics on its own. Apart from the optional sharing features you turn on yourself (Sections 4a–4c), the only way your cart data is sent to us is if you choose to send a report about a specific problem, and each report is sent individually, with your explicit confirmation. There is no "always share" report setting, and nothing is gathered from a page unless you act.

When a cart looks wrong, or a shop can't be read, you can tap Report. Before anything is sent, Wuz Cart shows you the exact, sanitized snapshot it would include, and nothing is transmitted until you press Send. A report may contain:

• A sanitized snapshot of the cart or shop page — with media, form fields, input values, IDs, and contact information stripped out. You review the exact snapshot before it sends.
• The shop's domain and what went wrong — so we know which store to fix and what to look for (for example, "the total didn't match" or "the cart couldn't be read"), plus any expected amounts you choose to type in.
• Sanitized error details, when the report is about a crash — the error message and the file/line, with page content and URLs stripped out.

A report never includes your browsing history, the other shops you visit, your cart contents beyond the one page you're reporting, your email, or any device or user identifier. You can see every report you've sent — and exactly what was in it — under Your reports in the extension, and you can delete the local record at any time. If you never tap Report, Wuz Cart sends nothing, ever.

4a. Optional community price guide (off by default)

Wuz Cart can help build a privacy-preserving “typical price” guide from real carts — but only if you turn it on. It is off by default; you enable it in Wuz Cart’s Settings and can turn it back off at any time. While it is on, about once a day Wuz Cart sends an anonymous, hashed price point for items in your tracked carts — including carts you have marked bought or archived, which Wuz Cart keeps watching so it can tell you about a later price drop. Each contribution contains only:

• a one-way hash of the product’s cross-shop identity (so the guide can group the same product across shops — never the product’s name);
• the price in cents and its currency;
• a one-way hash of the shop’s domain (used only to count how many independent shops reported a price and to limit abuse — never to follow you across products).

It never includes your name, the shop’s real domain or URL, the product name, your cart contents, your email, a Wuz account (there is none), or a timestamp you could be tracked by. There is no way to tie a contribution back to your name or identity — this is how the community can learn “the typical price for this product” while every contributor stays anonymous. If you never turn it on, none of this happens.

To keep the guide honest and abuse-resistant, each contribution carries an anonymous sender code — a random ID created for your installation the first time you share anything. Its only jobs are to tell “the same contributor” from “different contributors” and to resist manipulation; it is not tied to your name, email, or any account, because there is none. The same code is attached to the other sharing features below. When your installation first asks our server for the code, the server briefly uses a scrambled, one-way fingerprint of your network address purely to rate-limit abuse — it is never stored next to your sender code and never reveals your address to us. You can erase everything shared under your sender code at any time (Section 7).

4b. Optional shop-coverage diagnostics (off by default)

Wuz Cart also has an optional “help improve shop coverage” setting, off by default, that — only if you turn it on — helps us find which shops and platforms Wuz can’t read carts or prices on. When it’s on, for each shop Wuz tried to read it sends one small, anonymized record: the shop’s platform category (for example “shopify”), a one-way hash of the shop’s domain, whether the read worked (succeeded, was blocked, or found no price), and your sender code — never the shop’s real name or URL. It carries no cart data, no product names, no prices, and no personal information, and you can turn it off at any time.

4c. Optional community signals (off by default)

Wuz Cart can also share small, anonymized community signals — but only if you turn them on. Off by default. When on, Wuz can note things like “this shop showed a misleading ‘sale’ or a dark pattern,” “an item you were watching is back in stock,” or “a price you saw didn’t match” — each as a one-way hash of the shop’s domain plus the kind of signal, and your sender code. It never carries your identity, the shop’s real name or URL, or your cart. It helps the community avoid bad actors and catch broken listings; if you never turn it on, none of it happens.

4d. Turning community features off remotely

So we can quickly switch a community feature off if it ever misbehaves, Wuz Cart checks a small, digitally signed file on our server about once a day — but only if you’ve turned on one of the sharing features above. That check can only turn features off, never on, and never changes anything else about how Wuz Cart works or reads any of your data. If you share nothing, Wuz Cart never makes this check.

5. The waitlist email (this website)

If you submit your email on the waitlist form on wuzcart.com, the only thing collected is the email address itself, along with the timestamp of submission. It is stored by our hosting provider (Netlify) and used solely to send you a one-time notice when Wuz Cart is available to install. You can request deletion at any time by emailing hello@wuzcart.com; deletion will be processed within thirty (30) days.

Legal basis (GDPR Article 6). For users in the European Economic Area, the United Kingdom, or Switzerland, the legal basis for processing your email is your consent (Article 6(1)(a)), given when you submit the waitlist form. You may withdraw consent at any time, which is equivalent to requesting deletion as described above.

6. Data retention

• Extension data stored on your device persists until you uninstall Wuz Cart or use the Reset button inside the extension. We cannot retain it because we cannot read it.
• Waitlist email is retained until (a) we send the launch notice and you do not subscribe to further communication, after which we delete it within ninety (90) days, or (b) you request deletion, whichever is sooner.
• Problem reports you send are retained for up to one year for the purpose of diagnosing and fixing the issue you reported, then deleted.
• Anonymized contributions (if you opt in) are kept only long enough to be useful, then rolled up into anonymous aggregates and the raw entries deleted: price points up to twenty-four (24) months and community signals up to twelve (12) months. You can ask us to erase everything shared under your sender code at any time — your code is shown in Wuz Cart’s Settings, under “Help the community” (Section 7).

6a. Backups you create

Wuz Cart lets you export a backup file of your own data (your carts, price history, and settings) so you can restore it if your browser resets or you move computers. Backup files you create are yours; they never touch our servers. The file is written directly to your device, and — if you choose to add a password — it is encrypted on your device before it is saved. We never see it, and there is no copy anywhere but where you put it.

7. Your rights

Because Wuz Cart does not maintain a centralized store of your personal data, most "rights" requests are exercised directly by you, on your device, using the controls inside the extension or your browser. For the limited data we do hold (your waitlist email, any problem reports you’ve chosen to send, and any anonymized contributions you’ve shared under your sender code), you have the following rights:

• Right to access — request a copy of any personal data we hold about you.
• Right to correction — request that we correct inaccurate data.
• Right to deletion / erasure — request that we delete your data.
• Right to restrict or object to processing — applicable to EEA / UK / Swiss users under GDPR.
• Right to data portability — request your data in a structured, commonly used, machine-readable format.
• Right to withdraw consent — applicable to processing based on consent (e.g., waitlist email).
• Right to lodge a complaint with a supervisory authority (EEA / UK users) or your state attorney general (US users).

Because your installation holds its own anonymous sender code, you can have everything you’ve shared through the optional sharing features erased — across the price guide and community signals — without any account. Open Settings › Help the community, where the code is displayed. “Erase everything shared under this code” opens an email to us with the code already filled in, so you never have to look it up or quote it yourself. We do not need to know who you are to honour the request — the code is the only thing that identifies what to delete.

To exercise any of these rights, email hello@wuzcart.com. We will respond within thirty (30) days. We do not charge a fee unless your request is manifestly unfounded or excessive.

California residents (CCPA / CPRA)

California residents have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act. Beyond the rights listed above, you have the right to know what categories of personal information we have collected about you, the categories of sources, the business purposes for collecting it, and the categories of third parties (if any) with whom we share it. We do not sell or share personal information for cross-context behavioral advertising as defined under the CPRA, and therefore we do not need to provide a "Do Not Sell or Share My Personal Information" link under California law. We do not use or disclose sensitive personal information beyond the purposes permitted by the CPRA.

8. International data transfers

Our hosting provider (Netlify) operates servers in the United States and other jurisdictions. If you submit your email to the waitlist from outside the United States, your data is transferred to and stored in the United States. Netlify, our hosting provider, maintains its own safeguards for international transfers of personal data. For more information about Netlify's data handling, see netlify.com/privacy.

9. Security

Extension data stored locally on your device is protected by the same operating-system-level controls that protect the rest of your browser profile. Waitlist email submissions are transmitted over HTTPS and stored in Netlify's encrypted infrastructure. No method of transmission or storage is one hundred percent secure; we follow industry-standard practices but cannot guarantee absolute security. If we ever become aware of a security incident affecting your data, we will notify affected users as required by applicable law.

10. Children

Wuz Cart is not directed at children under 13. We do not knowingly collect any personal information from children. If you believe a child has provided us with personal information, please contact us at hello@wuzcart.com and we will delete it.

11. Third parties

The extension has no third-party dependencies at all. Everything it needs is bundled inside it. It contacts exactly two kinds of place: (a) the shopping sites you choose to track — when you visit them, your browser communicates with them as it normally does, and Wuz Cart reads only what is already on the page; and (b) wuzcart.com, and only when you have turned on one of the sharing settings described in section 4 and pressed Send yourself.

This website is separate, and it does use two outside services. Our static hosting provider, Netlify, serves these pages. The pages also load their styling from cdn.tailwindcss.com, operated by Tailwind Labs. Like any file your browser fetches from another server, that request reveals your IP address and the fact that you loaded a page on wuzcart.com. It carries no cart data, no shopping history, and nothing from the extension — the extension never loads it. If you would rather not contact that server, the pages remain readable with scripts blocked; only the visual styling is affected.

We do not share, sell, license, or otherwise disclose user data (other than the waitlist email, which is hosted by Netlify on our behalf), because we do not collect any.

12. Changes to this policy

If we materially change how Wuz Cart handles data, we will update this page, change the "Last updated" date at the top, and (for material changes) surface a notice inside the extension before the change takes effect. Continued use of Wuz Cart after the effective date of the revised policy constitutes acceptance of the changes.

13. Governing law

This Privacy Policy is governed by the laws of the Commonwealth of Pennsylvania, United States, without regard to its conflict-of-laws principles. Any dispute arising out of or relating to this policy shall be resolved in the state or federal courts located in Pennsylvania.

14. Contact

For any privacy-related questions, rights requests, or to report a security concern, contact:

• Email: hello@wuzcart.com