Privacy Policy

The following never leaves your browser - it is stored locally and used only to power features you trigger:

• Your Facebook friends list - the names, profile links, handles, IDs, and mutual-friend labels of your friends, loaded so you can search, filter, select, and unfriend them.
• Your removal history - a local log of friends you removed.
• Your settings - removal speed and display language.

This data is stored locally in your browser, is not transmitted to us, and is deleted when you clear it in the app or uninstall the extension.

To offer a free trial and a paid plan, and to prevent abuse, the extension sends a small amount of data to our own server (socialwarden.zocab.app). This is the only data that leaves your device to us:

• A random device identifier - a random ID generated in your browser (not tied to your identity or hardware) so your free-trial count and license can be recognized on this device.
• A device fingerprint hash - a non-reversible hash of basic browser attributes (e.g. user agent, language, time zone, screen size), used only to reduce trial abuse. It is not used to track you across sites.
• Your license key - when you activate a license and when we periodically re-verify it (roughly once a day) to confirm your subscription is still active.
• Your purchase email - returned to us by the payment provider when we verify your license, stored with your license record for support and to manage your subscription.

We do not send your friends list, your removal history, or the content of any web page to our server. License and trial data is used solely to verify your plan, enforce the free-trial limit, and bind your license to one active device (which you can move at any time).

• Facebook - the extension acts on your own account through your existing logged-in session, only for actions you confirm (loading your friends list and unfriending). Nothing is sent to us in the process.
• Gumroad - our payment provider. When you subscribe, Gumroad processes your payment and issues your license key under its own privacy policy. We verify that key against Gumroad; we never receive your card details.
• Supabase - our database provider, where we store license and device records described above on our behalf.

Local data stays on your device until you clear it or uninstall the extension. License and device records on our server are kept while your license is active and for a reasonable period afterward for support and accounting. You can remove your device from a license at any time in Settings → Plan, and you can request deletion of your license and device records by contacting us.

The extension requests only what its single purpose needs:

• Access to facebook.com - to load your friends list and carry out the unfriend actions you confirm, using your own logged-in session.
• Your Facebook login cookie - read to identify which account is signed in (so saved data is matched to the right account) and to confirm you are logged in.
• A security token from an open Facebook tab - when one exists, a short-lived token Facebook itself requires is read so the unfriend action can be authorized.
• Local storage - settings, license, device id, and your loaded list.
• Side panel - the interface.
• A header rule scoped to Facebook's API - so the actions you confirm are accepted.

It does not read the content of other websites you visit.

Unfriend Facebook Fast is not directed to children under 13 and should only be used on your own account.

If our data practices change, we will update this page and its "Last updated" date.

Questions about privacy, or a data-deletion request? Contact us at support@zocab.app.