This Privacy Policy explains how The Quick Apps (the "Studio", "we", "us") collects, processes, and protects personal data when you use our website thequickapps.com and our Chrome extension Xtract. We are fully compliant with the EU General Data Protection Regulation (GDPR) and applicable French law.
Table of contents
01Data Controller
The entity responsible for the processing of your personal data is:
- The Quick Apps — independent micro-SaaS studio (commercial name)
- Operated as a French sole proprietorship (entrepreneur individuel), based in Paris, France
- Contact: quickapps.support@gmail.com
For any question about this policy or the processing of your data, please use the email address above. We are not required to appoint a Data Protection Officer (DPO) under GDPR Art. 37, but the Studio founder personally handles all privacy-related requests.
02Data We Do Not Collect
What stays entirely yours.
The following data is never collected, stored, or transmitted to our servers — by design.
- ✕ No followers data. Scraping runs 100% in your browser. The CSV never touches our servers.
- ✕ No X credentials. We reuse your existing browser session. No password, no token is ever seen.
- ✕ No browsing tracking. The extension only activates on X follower pages. Nowhere else.
- ✕ No Google Analytics. No Meta Pixel, no Hotjar, no third-party trackers of any kind.
- ✕ No device fingerprints. No IP logging for analytics, no contact lists, no location.
- ✕ No selling, no sharing. We never sell or share your data with advertisers or data brokers. Ever.
03Data We Collect
We practice strict data minimization. We only collect what is strictly necessary to operate the service.
| Data | Purpose | Legal basis (GDPR) | When |
|---|---|---|---|
| Email address (via Google OAuth) |
Account identification, Premium access, support | Contract performance (Art. 6.1.b) | Only when you upgrade to Premium |
| User ID (UUID, technical identifier) |
Linking your account to your subscription | Contract performance (Art. 6.1.b) | On first Premium login |
| Subscription status (plan, expiration date, provider) |
Granting Premium features | Contract performance (Art. 6.1.b) | During active subscription |
| Payment transaction metadata (order ID, amount, date — NEVER card details) |
Legal accounting, fraud prevention | Legal obligation (Art. 6.1.c) | On purchase / renewal |
| Extension install ID (anonymous UUID, stored locally) |
Enforcing free-tier quota | Legitimate interest (Art. 6.1.f) | On first extension install |
04Third-Party Processors
We rely on a small number of trusted subprocessors. Each of them has signed or published a GDPR-compliant Data Processing Agreement (DPA).
| Processor | Role | Data shared | Location |
|---|---|---|---|
| Supabase | Database, authentication backend | Email, user ID, subscription status | Frankfurt, Germany (EU) |
| OAuth sign-in provider | Email, Google account ID | EU / US (Standard Contractual Clauses) | |
| LemonSqueezy | Credit-card payments · Merchant of Record | Email, order info, billing country | US (GDPR-compliant DPA) |
| NOWPayments | Cryptocurrency payments | Order ID, amount, wallet transaction hash | EU-based |
Payment card details are never seen, processed, or stored by The Quick Apps. All card data is handled directly by LemonSqueezy, which acts as Merchant of Record and is PCI-DSS compliant.
05Your Rights Under GDPR
As a data subject, you have the following rights under Articles 15–22 of the GDPR:
- Right of access (Art. 15) — obtain a copy of your personal data
- Right to rectification (Art. 16) — correct inaccurate or incomplete data
- Right to erasure / "right to be forgotten" (Art. 17) — request deletion of your data
- Right to restriction of processing (Art. 18)
- Right to data portability (Art. 20) — receive your data in a machine-readable format (JSON or CSV)
- Right to object (Art. 21) — object to processing based on legitimate interest
- Right not to be subject to automated decision-making (Art. 22) — we do not perform any automated profiling
How to exercise your rights: send an email to quickapps.support@gmail.com from the address associated with your account. We respond within 30 days (extendable to 90 days for complex requests, with prior notice). The service is free of charge, except for manifestly unfounded or excessive requests.
06Data Retention
We only retain data for as long as strictly necessary.
| Data category | Retention period | Justification |
|---|---|---|
| Account data (email, user ID, subscription) | While subscription active + 3 years | Commercial prescription (French Civil Code Art. L. 110-4) |
| Payment logs & invoices | 10 years | French fiscal law (Livre des procédures fiscales Art. L. 102 B) |
| Anonymous quota data (install ID) | 2 years | Fraud prevention (legitimate interest) |
| Support email exchanges | 3 years after last contact | Commercial prescription |
After the retention period, data is either deleted or fully anonymized.
07Cookies & Tracking
Landing page (thequickapps.com): no cookies, no local storage (other than your language preference), no tracking scripts of any kind. The page loads only Google Fonts, which is a static CSS request.
Xtract extension: no cookies. The extension uses your browser's local storage (chrome.storage.local) to remember your install ID and your recent export settings. This data never leaves your device.
Since we do not use cookies or trackers, no cookie banner or consent is required under the ePrivacy Directive.
08Children's Privacy
The service is not intended for persons under the age of 16. We do not knowingly collect data from minors. If you believe a minor has created an account, please contact us and we will delete it without delay.
09International Transfers
All account and subscription data is stored on Supabase servers located in the European Union (Frankfurt, Germany). No personal data is transferred outside the EU for storage purposes.
Limited transfers occur through Google OAuth and LemonSqueezy, which may process data in the US. Both providers rely on Standard Contractual Clauses (SCCs) approved by the European Commission, in accordance with GDPR Chapter V.
10Changes to this Policy
We may update this Privacy Policy to reflect changes in our practices, the service, or the law. When we do:
- Subscribers will be notified by email at least 30 days before material changes take effect
- Free users will see a one-time notification in the extension
- The "Last updated" date at the top of this page will be modified
Continued use of the service after the effective date constitutes acceptance of the revised policy.
11Complaints
If you believe your data is being processed unlawfully, you may lodge a complaint with the French data protection authority:
- CNIL — Commission Nationale de l'Informatique et des Libertés
- 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
- Website: www.cnil.fr
You may also contact the data protection authority of your EU country of residence.
12Contact
Questions about your data?
Email us at quickapps.support@gmail.com
We reply within 30 days, usually much faster.