Trust center
Privacy Policy
ShopSherpa is built to protect people from scams, not create a new privacy problem. This page explains what we collect, what we avoid collecting, and how sensitive features should work as the product moves from beta to launch.
Last updated: May 14, 2026
Short version
We collect the information needed to run the waitlist, process pre-orders, improve the product, and detect scam signals. We do not sell your personal data. Features involving email, passwords, or masked cards should use the least access possible and clear permission screens before launch.
What we collect
- Waitlist and pre-order details, such as your email address and Stripe checkout status.
- Basic product analytics, such as page visits, feature usage, browser type, and error logs.
- Security signals needed to evaluate a store, seller, checkout domain, review pattern, or suspicious message.
What we do not sell
- We do not sell personal data.
- We do not sell browsing history.
- We do not sell email content, payment information, or security alerts.
Browser extension data
- The free extension is designed to inspect shopping pages only when it needs to identify scam signals.
- Store URLs, seller details, review patterns, and checkout domains may be checked against ShopSherpa's fraud-pattern database.
- Where possible, checks should happen locally or with minimized data. If cloud checks are needed, they should use only the smallest practical amount of information.
Email protection
- Phishing Shield is planned for ShopSherpa Plus. It is intended to check sender domains, link destinations, and scam-language patterns.
- The product should not store your inbox content or use your private emails for advertising.
- If a future email integration requires permission from Gmail, Outlook, or another provider, the permission screen should explain exactly what access is requested.
Password vault and masked cards
- Password Vault and Masked Cards are Plus features planned for launch. These features involve sensitive data, so they will require stronger security controls before public release.
- ShopSherpa should never display or store raw card data unless a payment partner requires it for the feature to work. Stripe currently handles pre-order checkout.
- Masked Cards are intended to create store-specific payment aliases so your real card number is not exposed to unfamiliar merchants.
Your choices
- You can unsubscribe from emails at any time.
- You can ask us to delete waitlist or account information by emailing hello@shopsherpa.org.
- You can uninstall the extension at any time from your browser's extension settings.
Questions or deletion requests
Email us if you want your waitlist information deleted, have a privacy question, or want more detail about a specific product feature.
Email privacy question