Privacy policy
Effective 17 October 2026. This policy covers the AdXray Chrome extension, the AdXray server it talks to, and this website.
Summary
- AdXray runs only on the Meta Ad Library (facebook.com/ads/library).
- We keep your Google email and account ID, your plan, your default country and the IDs of the ads you've opened.
- We never see your Facebook login, your ad accounts, your messages or your browsing on other websites.
- We don't sell your data, we don't show you ads and we don't use your data for anything except running AdXray.
Who we are
AdXray is run by Suwaminathan Vijin, Tamil Nadu, India ("AdXray", "we", "us"). We decide how your personal data is used (we are the "data controller" or "data fiduciary"). Contact: adxray.com@gmail.com.
What we collect
| Data | When | Why |
|---|---|---|
| Google account email address and Google account ID | When you sign in with Google | To create your account, recognise you on any computer and apply your plan |
| Plan details: plan, billing period, status, end date, and the customer and subscription IDs from our payment provider | When you get a paid plan | To give you the features you pay for |
| Default country | If you choose one in the extension | To work out ads that give no country signal |
| Library IDs of the ads you open, with the date | Each time you open an ad in AdXray | To count your free ads and apply the fair-use limit on paid plans |
| Email addresses of team members | If a Business account owner adds them | To give those people access under that plan |
Ad details sent to our server
When you open an ad in AdXray, the extension sends the public details of that ad to our server: the ad text, dates, button type, link, format, platforms, the number of ads that share the creative, and any spend or reach figures Meta shows. This is public information from the Ad Library, not information about you. Our server uses it to calculate the numbers and does not store it, except the ad's Library ID as described above.
Advertiser websites
To fill the Store tab, our server visits the public landing page the ad links to and reads things like product prices, currency, review count and store platform. We cache these public details for up to 24 hours so we don't visit the same site repeatedly. This is information about the advertiser's website, not about you.
Stored only in your browser
The extension stores your Google sign-in token and your settings (AdXray on or off, local currency or USD, whether you've closed the welcome message) in Chrome's extension storage on your computer. Signing out removes the token and revokes it with Google.
Downloads
When you use the HD download button, Chrome downloads the file directly from Meta's servers to your computer. The file doesn't pass through our servers.
Technical logs
Our hosting provider keeps standard request and error logs (for example time, address and error messages) for a limited time, to keep the service working and secure.
What we don't collect
- Your Facebook or Instagram login, password, cookies or ad accounts.
- Your browsing history. The extension doesn't run on any website except the Meta Ad Library.
- Your messages, contacts or files.
- Payment card details. Payments are handled by our payment provider; we only receive a customer ID and the subscription status.
This website has no analytics, advertising or tracking cookies.
How we use it
We use your data only to provide AdXray: signing you in, calculating ad numbers, applying your plan and limits, answering support emails and keeping the service secure. Our legal bases are performing our contract with you, our legitimate interest in preventing abuse, and your consent where the law requires it.
We do not sell personal data, use it for advertising, build profiles of you, or use it to decide creditworthiness or lending.
Google user data
AdXray asks Google only for the openid and email scopes: your email address and an account ID. We use them only to sign you in and link your plan to your account.
AdXray's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We don't transfer this data to others except as needed to provide the service, to comply with the law, or as part of a merger or sale with notice to you. No person reads it except when you ask for support, for security reasons, or when the law requires it.
Who we share it with
We use these service providers. Each one processes data only to provide its service to us.
- Supabase: hosts our database and server code.
- Google: provides sign-in.
- Payment provider (Paddle.com): sells the subscription as merchant of record and handles payment, tax and invoices. Their own privacy policy applies to the checkout.
- Exchange-rate services (ExchangeRate-API, Frankfurter): our server downloads daily currency rates. No personal data is sent.
We may also share data if the law requires it, or to protect our users or the service. If AdXray is sold or merged, your data would move to the new owner under this policy, and we'd tell you first.
Our providers may process data outside your country, including in the United States, the European Union and Asia. Where the law requires it, we rely on the providers' standard contractual safeguards for these transfers.
How long we keep it
- Account, plan and settings: while your account exists.
- Ad Library IDs on paid plans: deleted after 7 days.
- Ad Library IDs on the free plan: kept while your account exists, so the free 10-ad allowance works.
- Cached advertiser website details: up to 24 hours; they contain no personal data.
- When you ask us to delete your account, we delete your data within 30 days, except records we must keep by law (for example billing records kept by the payment provider).
Your choices and rights
You can sign out at any time from the extension, and uninstalling the extension removes everything it stored in your browser.
Depending on where you live (for example under the EU and UK GDPR, India's Digital Personal Data Protection Act 2023, or California law), you may have the right to access, correct, delete or export your data, to object to or restrict its use, to withdraw consent, and to complain to your data-protection authority. To use any of these rights, email adxray.com@gmail.com from the email address you signed in with. We reply within 30 days. This address is also our contact for grievances under Indian law.
Security
All traffic between the extension and our server uses HTTPS. Sign-in tokens are verified with Google and re-checked at least every 5 minutes. The database can only be reached by our server code, not by the extension or the public. No system is perfectly secure, and we'll tell you and the relevant authorities about a breach where the law requires it.
Children
AdXray is a business tool for adults. It isn't meant for anyone under 18, and we don't knowingly collect their data. If you think a child has signed up, email us and we'll delete the account.
Changes
If we change this policy we'll update the date at the top. If a change affects how we use your data in a significant way, we'll tell you in the extension or by email before it applies.
Contact
Suwaminathan Vijin, Tamil Nadu, India
Email: adxray.com@gmail.com