Privacy Policy for CC Buy Order Helper
Last Updated: April 10, 2026
1. Introduction
This Privacy Policy explains how CC Buy Order Helper ("we", "us", or "our") collects, uses, and protects your information when you use our browser extension ("the Extension"). The Extension displays sell prices, profit margins, and market pricing data on Crystal Commerce buy order pages.
2. Information Collection and Use
2.1. Personal Information:
The Extension does not collect, transmit, or sell any personal information.
2.2. API Credentials:
The Extension requires API credentials (such as a Crystal Commerce proxy secret and optional third-party API keys) to fetch pricing data. These credentials are entered by you on the Extension's options page and stored locally on your device using the browser's built-in storage. They are never transmitted to us or any third party—they are only sent directly to the respective API services to authenticate your requests.
2.3. Pricing Data:
The Extension fetches product pricing information from Crystal Commerce, TCGPlayer, JustTCG, Scryfall, and Pokemon TCG APIs. These requests contain only product identifiers (such as product IDs or card names)—never personal or user-identifying information. Fetched price data is cached locally on your device to reduce redundant API calls.
2.4. Extension Preferences:
Settings such as the enabled/disabled toggle state and cache duration preferences are stored locally on your device. These preferences are never transmitted externally.
3. Data Storage and Security
All data—including API credentials, cached prices, and user preferences—is stored locally on your device using chrome.storage.local and chrome.storage.session. The Extension does not operate any external servers and does not transmit your data to us. Your credentials and browsing activity remain entirely private to you.
4. Third-Party Services
The Extension communicates with the following third-party APIs solely to retrieve product pricing data:
- Crystal Commerce API
- TCGPlayer API
- JustTCG API
- Scryfall API
- Pokemon TCG API
Only product identifiers are sent in these requests. Please refer to each service's own privacy policy for information on how they handle API requests.
5. Analytics and Tracking
The Extension does not include any analytics, telemetry, or tracking. No usage data is collected or transmitted.
6. Children's Privacy
The Extension does not knowingly collect personal information from children under 13. Since the Extension does not collect any personal information from any user, there is no risk of inadvertent collection of children's data. If you are a parent or guardian and have concerns, please contact us.
7. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
8. Contact Us
If you have any questions about this Privacy Policy, please contact us at:
By email: kevin@silicroncode.com