Privacy Policy — AwardSnipe
Last updated: 2026-05-06
This is the privacy policy for AwardSnipe, a Chrome extension that auto-fills the JAL APIS booking forms. It's developed and operated by Pablo Quijano, a sole proprietor doing business as AwardSnipe ("we," "us"). Contact: support@awardsnipe.com.
The TL;DR: most of your data lives only on your device. The only things we ever see on our servers are your license code, a random per-install UUID, and the email address you used at Stripe Checkout. We don't see your passport details, address, JAL credentials, or anything you book.
What stays on your device
- Profile data (passenger names, passport numbers, validity dates,
nationality, contact preferences, US destination address). Stored in
Chrome's local extension storage (
chrome.storage.local). Never transmitted to us or anyone else. - Card CVV. Held in browser-session memory
(
chrome.storage.session) only while the booking flow is active. Cleared automatically when you close the browser, and deleted right after the payment field is filled. - JAL booking session. The extension reads JAL's pages directly from your browser. Nothing about your search, seat, route, dates, fare, or booking confirmation is sent to us.
What we collect
We operate one server (api.awardsnipe.com) for license/token
issuance and validation. It only sees the following:
- Email address — captured by Stripe Checkout when you buy a license code, used to email you the code via Resend. We retain the email tied to the license record for support purposes.
- License code — generated by us, sent in your purchase email, pasted into the extension by you.
- Device UUID — a random identifier generated locally by the extension on first install (stored in your browser, not derived from any personal info). Sent alongside license requests so we can bind a code to the device that redeemed it.
- Stripe session ID — kept as an audit reference for the purchase.
We do not collect: IP address logs, analytics, telemetry, browser fingerprints, page contents, JAL session cookies, JAL account credentials, your itinerary, your payment card details (Stripe handles those — we never see them).
How we use it
- To deliver the license code you purchased (email).
- To verify your code is valid and has tokens remaining when the
extension calls
/redeemand/consume. - To detect and block sharing — codes are bound to the device that first redeems them.
- To respond to support requests (e.g., releasing a code so you can use it on a new device).
That's it. We don't market, profile, or sell.
Third parties
- Stripe processes your payment. See stripe.com/privacy. We never see your card details — only the email and a session ID.
- Resend delivers your license-code email. See resend.com/legal/privacy. They see the email address and the message contents (your code).
- Cloudflare hosts our license server. See cloudflare.com/privacypolicy.
- Google Chrome Web Store distributes the extension installer.
We have no other third-party data sharing. We don't use analytics products, ad networks, or session-replay tools.
Data retention
- License records (code + balance + bound deviceId + email) are retained indefinitely as audit history. We may delete them on request.
- Webhook idempotency markers auto-expire after 24 hours.
- Rate-limit counters auto-expire within 2 hours.
Your rights
- Access / correction / deletion. Email support@awardsnipe.com with your license code or purchase email. We'll respond within a reasonable window.
- Code transfer between devices. Email us; we manually unbind so you can re-redeem on the new device.
- Refund. If a code fails for a reason that's our fault (server outage, code never delivered, etc.), email us. Refund policy is per the purchase terms.
Children
The extension is intended for adult travelers booking award flights. We do not knowingly collect data from children under 13.
Changes to this policy
If we change anything material, we'll update the date at the top and, where relevant, post the change in the extension's release notes.