Who's Here? — Privacy Policy
Last updated: April 2026
Who's Here? is a Chrome extension developed by Extion that creates anonymous real-time chat rooms for every webpage on the internet. This Privacy Policy explains what data we collect, why we collect it, and how it is used.
1. What Data We Collect
Anonymous session identity: When you first use Who's Here?, a random anonymous username (e.g. "CuriousOwl294") and a random session ID are generated and stored locally in your browser using chrome.storage.local. No name, email, or personal information is collected for free users.
Google Account identity (Super Users only): If you purchase a Super User subscription or an individual skin, Who's Here? requests access to your Google identity via the Chrome Identity API (chrome.identity). This is used solely to create a persistent, anonymous identifier that ties your purchase to your account across devices and reinstalls. We store a one-way cryptographic hash (SHA-256) of your OAuth token — your actual Google account details, name, and email address are never accessed, stored, or transmitted to our servers.
Chat messages: Messages you send in public rooms are stored in Firebase Realtime Database. Messages are not associated with any personally identifiable information. Whisper messages are automatically deleted after their timer expires.
Room visit statistics: We track the number of messages sent per room to power the leaderboard feature. This data is anonymous and not linked to any user identity.
2. How We Use Your Data
- To display your anonymous username in chat rooms
- To persist your purchased Super User status and skins across devices (Google identity hash only)
- To power the live leaderboard showing active chat rooms
- To enforce room bans set by private room owners
We do not use your data for advertising, profiling, or any purpose beyond providing the features described above.
3. Data Sharing
We do not sell, rent, or share your data with third parties. The following third-party services are used to operate Who's Here?:
- Google Firebase — stores chat messages and room data. Firebase Privacy Policy
- Stripe — processes payments for Super User subscriptions and skins. Stripe handles all payment data directly and we never see your card details. Stripe Privacy Policy
- Google OAuth — used only when you make a purchase, to create a persistent anonymous identifier. We receive only an access token, which we immediately hash and discard.
4. Data Retention
Chat messages are retained in Firebase until manually deleted or until our database cleanup processes remove old data. Local preferences (username, skin, brightness settings) are stored in your browser and remain until you uninstall the extension or clear extension data.
5. Your Rights
Since Who's Here? does not collect personally identifiable information for free users, there is no personal data to request or delete. Super Users may revoke Google OAuth access at any time via Google Account Permissions, which will remove the ability to verify purchase status on new devices.
6. Children's Privacy
Who's Here? is not directed at children under the age of 13. We do not knowingly collect data from children.
7. Changes to This Policy
We may update this Privacy Policy from time to time. Updates will be posted at this URL. Continued use of the extension after changes constitutes acceptance of the updated policy.
8. Contact
If you have questions about this Privacy Policy, please contact us at: extion@gmail.com
Or visit: southbridgemachine.com/whoshere