Privacy Policy

This document describes what data the FortuneAI browser extension collects, where it goes, and what we do with it. Plain language, no boilerplate.

1. What the extension collects

The extension stores all of the following locally on your device using chrome.storage.local. A subset is sent to our backend (https://cryptoapi.slim-shaggy.com) when you use Pro features.

Stored locally only (never leaves your device):

• Your notification preferences (thresholds for big-win and whale alerts, tilt-alert toggle).
• seen_alerts — a dedupe cache so the same alert isn't shown twice.
• last_refresh, last_error — the extension's own health bookkeeping.
• Cached copies of public analytics (trending games, whales, etc.) that the side panel displays.

Stored locally and sent to the backend:

• device_id — a random UUID generated on first install. This is the only identifier we use to bind a paid license to your browser. It is not linked to your identity, your email, or your Bitfortune account.
• pro_jwt — a short-lived (15 min) authentication token issued by our backend after you activate a Pro license key. Used to prove your subscription on Pro-gated API calls.

Optional and only if auto-detection succeeds:

• my_user_id — your Bitfortune numeric user id, read from Bitfortune's own profile endpoint when you're logged in. Used only for personal analytics features (session tracking, tilt alerts). If detection fails or you click "Forget" in Options, we discard it. It is never used for licensing.

2. What we do not collect

• Email addresses, passwords, real names.
• Payment information — purchases happen inside the Telegram bot @fortuneai_bot via NOWPayments; the extension never touches your payment data.
• Browsing history outside of bitfortune.com.
• Screen contents, keystrokes, clipboard.
• IP address beyond what's needed for request routing (standard HTTP server logs, 30-day retention).
• Data from any site other than bitfortune.com and cryptoapi.slim-shaggy.com — see the extension manifest's host_permissions.

3. Where your data goes

Only to:

• Our backend at https://cryptoapi.slim-shaggy.com (FastAPI on Hetzner Cloud, Germany). Data in transit is TLS 1.3 via Cloudflare.
• Our Telegram bot (@fortuneai_bot) when you choose to interact with it for purchases or support. Telegram receives what you explicitly send them; the extension itself does not talk to Telegram.
• NOWPayments (nowpayments.io) receives only your crypto payment — the extension never forwards to them.

We do not share any of the data with third-party advertisers, ad networks, data brokers, or analytics vendors. No Google Analytics, no Sentry, no Mixpanel, no Amplitude, no nothing. There is zero ad tracking in this extension.

4. Retention

• Locally (in your browser): kept until you uninstall the extension or click "Clear data" in Options, whichever comes first.
• On the backend: your device_id and subscription status are kept for the duration of your subscription plus 90 days for support and dispute handling. After that, the row is deleted.
• Server access logs rotate every 30 days.
• Aggregated, anonymised bet feed data (used for the analytics) is kept per the backend retention policy: raw 7 days, 5-minute aggregates 30 days, hourly 180 days, daily 2 years.

5. Your control

• Uninstall the extension at any time via chrome://extensions. This clears chrome.storage.local including your device_id.
• Click "Forget detected user" in Options to discard my_user_id.
• Message @fortuneai_bot with the command /forget — we will delete the backend records associated with your device_id. Note that license purchases are non-refundable: uninstalling or requesting deletion does not return any remaining subscription time.

6. Purchases and refunds

License purchases are one-time, crypto-native, and non-refundable. Once a license key is minted and delivered to your Telegram chat, the purchase is final. There is no auto-renewal — each period has to be paid for explicitly. If something goes wrong mechanically (payment confirmed but key not delivered, key delivered but invalid, etc.), contact support: we will fix, reissue, or migrate the license at no extra cost. "Changed my mind" is not a refundable reason.

7. Children

FortuneAI is not directed at anyone under the age of 18. Gambling products are restricted to adults in every jurisdiction we're aware of. If you are under 18, do not install this extension and do not use Bitfortune.

8. Changes to this policy

If we change this policy in any material way, we will bump the "Last updated" date at the top of this document and show a notice in the extension side panel on next launch. Minor wording tweaks will not trigger the notice.

9. Contact

• admin@slim-shaggy.com
• Telegram: @fortuneai_bot — any free-text message is forwarded to a human