This Privacy Policy explains how Foreplay Ventures Inc. (“Foreplay,” “we,” “us,” or “our”) collects, uses, discloses, and protects information when you use our website at foreplay.co, our web and mobile applications, our API, and our Chrome browser extension (together, the “Services”). It forms part of, and is incorporated into, our Terms of Service.
Foreplay's collection and use of information received through the Chrome Web Store and our Chrome extension comply with the Chrome Web Store User Data Policy, including the Limited Use requirements. In particular:
Foreplay Ventures Inc. is the controller responsible for your personal information. For any privacy question or to exercise your rights, contact us at hello@foreplay.co.
IP address, approximate location, device and browser type, and usage information such as the pages you view and time spent, collected through cookies and similar technologies.
The Foreplay Chrome extension shows you real-time analytics for any web page you view. To generate those analytics for the page in front of you, and to surface related advertising and competitor insights, the extension — after you grant consent — collects:
You can withdraw consent or uninstall at any time. We collect only what the real-time analytics features require, and we do not run background collection unrelated to them.
Purpose: Provide and operate the Services, including the extension's real-time page analytics features
What we use: Account, saved content, browsing activity, ad data
Legal basis(GDPR): Performance of a contract
Purpose: Build and improve our ad-intelligence database and product features (using aggregated / de-identified data)
What we use: Browsing activity, ad data — aggregated and de-identified
Legal basis(GDPR): Legitimate interests
Purpose: Personalize your experience and provide support
What we use: Account, usage, support comms
Legal basis(GDPR): Contract / legitimate interests
Purpose: Billing and fraud prevention
What we use: Payment, account, usage
Legal basis(GDPR): Contract / legal obligation / legitimate interests
Purpose: Security, abuse investigation, and legal compliance
What we use: All categories as needed
Legal basis(GDPR): Legal obligation / legitimate interests
Purpose: Marketing about our own products (only if you opt in where required)
What we use: Email, usage
Legal basis(GDPR): Consent / legitimate interests
We create aggregated, anonymized, and de-identified datasets from the information we collect — including browsing and ad data — and use them to build, operate, and improve our real-time analytics and ad-intelligence features and the Services generally. We maintain technical and organizational measures designed to prevent re-identification. Consistent with the Chrome Web Store Limited Use requirements, we apply the same use and transfer restrictions to this derived data as to the underlying raw data, and we do not sell it or use it for advertising.
We share personal information only as follows, and we do not sell your personal information:
We use vetted third parties to operate the Services, including: Stripe (payments); Google Cloud & Cloud Flare (hosting); Loops (email); Attio (CRM); Post Hug (product analytics); Intercom (customer support) rEach is bound by contract to protect your data and use it only on our instructions.
We may process and store information in Canada, the United States, and other countries. Where we transfer personal information out of the EEA, the UK, or Canada, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms. You may request a copy of the relevant safeguard by contacting our Privacy Officer.
We keep personal information only as long as needed for the purposes in this policy, then delete or de-identify it. Indicative periods: account data for the life of your account and up to 48 months after closure; support communications up to 6 months after account deletion; billing records as required by tax/accounting law; De-identified and aggregated data may be retained indefinitely.
We use appropriate technical and organizational measures to protect personal information, including transmitting personal and sensitive data over secure connections (TLS/HTTPS) and storing it at rest using strong encryption (such as AES or RSA). No system is perfectly secure, but we maintain access controls, monitoring, and incident-response procedures, and we will notify affected users and regulators of a breach as required by applicable law.
You may access and correct your personal information, withdraw consent, and ask about our handling of your data. You may also request deletion or de-indexing where the law allows. We report privacy breaches presenting a real risk of significant harm to the Office of the Privacy Commissioner of Canada and, for Quebec residents, the Commission d'accès à l'information, and to affected individuals. If we ever use automated decision-making that affects you, we will tell you and let you submit observations. Unresolved concerns can be raised with the OPC or the CAI.
You have rights of access, rectification, erasure, restriction, portability, and objection (including to processing based on legitimate interests and to direct marketing), and the right to withdraw consent and to lodge a complaint with your supervisory authority. We respond within statutory timeframes.
You have the right to know the categories and specific pieces of personal information we collect, to delete it, to correct it, and to limit use of sensitive personal information. We do not sell or share your personal information for cross-context behavioral advertising. We honor opt-out preference signals such as Global Privacy Control, and we will not discriminate against you for exercising your rights.
To exercise any right, contact hello@foreplay.co. You may use an authorized agent, and we will verify your identity before responding.
Where required, we send commercial electronic messages only with your consent, identify ourselves, and include an unsubscribe mechanism in every message, consistent with Canada's Anti-Spam Legislation (CASL) and other applicable laws. You can opt out of marketing at any time without affecting service messages.
On our website we use cookies and similar technologies for essential functionality, analytics, and (with consent where required) marketing. You can manage non-essential cookies through our cookie banner and your browser settings, and we honor recognized opt-out signals such as Global Privacy Control. Our Chrome extension does not use cookies to track you across unrelated sites for advertising.
The Services are not directed to children. You must be at least 13 to use them, and we do not knowingly collect data from anyone under that age.
We may update this policy to reflect changes in our practices or the law.