Privacy Policy — Startup X-Ray Browser Extension

Effective Date: October 24, 2026 • Publisher: Mystique Lab Engineering (mystiquelab.dev)

1. Single Purpose & Local-First Execution

Startup X-Ray provides instant on-page DOM, mobile viewport, SEO, and EU Accessibility Act (EN 301 549 / WCAG 2.2 AA) readiness checks alongside an offline-bundled index of publicly disclosed startup funding (SEC Form D / Y Combinator) and open engineering roles. All DOM inspection and company lookup operations run 100% locally inside your browser.

2. Data Collection & Storage

• No Browsing History Tracking: Startup X-Ray does not transmit, log, or store the URLs you visit or the DOM contents of any webpage on external servers.
• No Personal Data Collection: We do not collect names, email addresses, IP addresses, cookies, authentication credentials, or telemetry analytics from extension users.
• Local Storage Only (chrome.storage.local): The extension stores only your optional Pro License Key status (xrayProUnlocked and xrayLicenseKey) locally on your device.

3. Permissions Justification

• activeTab: Used solely when you open the Startup X-Ray popup to inspect the current tab's hostname and compute on-page DOM/SEO/accessibility metrics locally.
• storage: Used solely to persist your Pro License activation status locally in chrome.storage.local.
• https://api.gumroad.com/*: Used solely when you click "Verify" to validate a Gumroad license key directly against Gumroad's official /v2/licenses/verify endpoint.

4. Remote Code Attestation

Startup X-Ray bundles all JavaScript, CSS, and its startup reference index (data/xray_index.json) directly inside the signed extension package. It does not load or execute any remote scripts, eval(), or third-party analytics SDKs.

5. Contact

For privacy inquiries or support, contact Mystique Lab Engineering at mystiquelabinfo@gmail.com.