# Privacy Policy — GermsNach

**Last updated:** July 2026

GermsNach ("the extension") is a browser extension for Chrome, Edge, and Brave
that customizes the visual interface of Germs.io (borders, background, cell
background) and adds optional features: high scores, custom skin panel, and
custom emotes. This policy explains what data the extension processes, how
it's used, and how it's stored.

## 1. Data stored locally on your device

The following settings are stored using the browser's `chrome.storage.local`
API and **never leave your device**:

- UI color and background color preferences
- Cell background preference
- Menu zoom level
- Custom photo URL (if you set one in the money-square panel)
- Favorite skins (URLs and names you save)
- Applied skin preference
- Saved nicknames (for quick use in the My Names tab)
- Skin reports (stored locally, not transmitted)

This data is not transmitted to any server and is deleted when you uninstall
the extension or clear browser data for the extension.

## 2. Data transmitted to third-party services

### 2a. Supabase (public skins & high scores)

When you browse the **Skins > Public** tab, the extension reads a list of
publicly-uploaded skins from a Supabase database (skin name, image URL,
username). No authentication is needed — this is read-only public data.

When you play supported game modes (Virus Feed, Self Feed), your **score,
player name, and a hashed player identifier** are submitted to Supabase to
display a high scores leaderboard. This submission is anonymous (no
login/account required). Scores are stored in two tables:

- All-time leaderboard (`nach_best_scores`)
- Weekly top 3 (`nach_weekly_scores`)

If you do not want your scores submitted, do not use the high scores feature.

### 2b. Imgur

If you paste an Imgur URL into the Photo panel, the extension references that
URL to display the image. The extension does not upload anything to Imgur.

## 3. What we do NOT collect

- We do not collect browsing history outside of germs.io.
- We do not collect payment information.
- We do not use analytics or third-party tracking scripts.
- We do not use OAuth logins, accounts, or authentication of any kind.
- We do not collect or transmit your Discord, Google, or any other social
  identity.

## 4. Third-party services

- **Supabase** (database) — see [Supabase's Privacy Policy](https://supabase.com/privacy).
  Used for public skin listing and high score storage. Both are read-only or
  anonymous-write; no account creation is required.
- **Imgur** (if you paste an image URL) — images are only referenced by URL,
  not uploaded by the extension.

## 5. Data deletion

To clear all locally stored data: go to `chrome://extensions` → GermsNach →
details → `Extension options` or right-click the extension icon → `Manage
Extension` → `Clear storage`.

Scores submitted to Supabase are not personally identifiable beyond the player
name you enter in the game. There is no account system, so deletion of remote
scores must be requested via the GitHub repository issues page.

## 6. Changes to this policy

We may update this policy as the extension evolves. Changes will be reflected
in this document with an updated "Last updated" date.

## 7. Contact

For questions about this policy, open an issue on the project's GitHub repository.