Privacy Policy
Last updated: November 2026 • Applicable to Earlyfly.net, APIs, and the Earlyfly Browser Extension.
1. Privacy-Preserving Analytics (Salted Hashes)
Earlyfly values human anonymity. We do not track cross-site tracking IDs or fingerprint your device. Outbound clicks and page views are anonymized using a daily rotating cryptographically salted SHA-256 hash (`visitorHash`). Your raw IP address and identity are never stored with analytics logs.
2. Browser Extension Permissions
The official Earlyfly Browser Extension interacts with specified domains (`chatgpt.com`, `claude.ai`, `gemini.google.com`, and surf exchange target sites) only to:
- Detect prompt submission to present optional, non-intrusive sponsor cards during AI generation time.
- Enforce active-tab dwell verification so revenue share is credited fairly to your cash wallet.
- Coordinate 1:1 reciprocal traffic exchanges without accessing personal browsing history, passwords, or cookies.
3. Account Information & Data Retention
We only collect information you provide voluntarily (username, email address, password hash, product submissions). Passwords are cryptographically hashed using bcrypt (cost factor 12). You have the right to request full account deletion and data export at any time.
4. Cookies & Local Storage
We use secure HTTP-only cookies (`ef_at`, `ef_rt`) solely for user session persistence and CSRF mitigation. We do not sell user data or share session tokens with third-party advertisers.