Effective: 11 November 2026
1. Who we are
The controller of your personal data is PayForSay s. r. o., Doležalova 3424/15C, Bratislava – Ružinov, 821 04, Slovakia, Reg. No. 54 455 073, VAT SK2121683322 ("we"). We publish Chrome extensions under the HotPanCake brand and operate hotpancake.com. Contact for privacy matters: info.hotpancake@gmail.com.
2. Extensions
Each extension has its own privacy page listing exactly what it stores and sends — for example NotePADD and Exchange Rate. In general:
- Your content stays with you. Notes, favourites and settings are stored in your browser. If you turn on Google Drive sync in NotePADD, your notes are saved to your own Google Drive; we do not receive them.
- Public data is downloaded, not your data uploaded. Exchange Rate downloads exchange rates from our rate server; Internet Radio Player loads the station list from the public Radio Browser directory and plays streams from the stations themselves.
- Extensions with paid plans (if an extension offers one) send a random device ID, usage counters and plan status, and receive the e-mail you enter to buy or restore a plan.
- We do not collect browsing history, page content or the text you write.
3. Purchases
Most HotPanCake extensions are free. Where an extension sells a paid plan, the payment is processed by the payment provider named on the checkout page, which calculates taxes and issues receipts under its own privacy policy. We receive the order data needed to activate and support your plan: e-mail, plan, country, amount and order number. We also record payment events — purchases, renewals, cancellations, refunds and payment disputes — with the plan, amount, country and e-mail, and send them to our internal messaging channel and an internal spreadsheet for accounting and support. We keep purchase records as long as accounting and tax law requires.
4. Website
- Server logs. Our web server records technical data of each request (IP address, time, address requested, browser) to keep the site secure and working. Logs are deleted after a short period.
- Cookies and analytics. On most pages Google Analytics (through Google Tag Manager) runs only if you agree in the cookie banner. The pages an extension opens for you — after installation or removal, feedback, feature requests — count the visit with Google Analytics without a banner, so we can see whether these pages and forms work. The Meta (Facebook) Pixel runs only if you choose "Accept all" in the cookie banner. A first-party cookie remembers your language. See the cookie policy.
- Forms. When you send a form — feedback, a feature request, the reason for removing an extension, or a review — we receive what you write, the product and language, and your e-mail if you enter it. Messages are delivered to our e-mail, our internal messaging channel and an internal spreadsheet so that we can answer.
5. Legal bases
- performance of a contract (providing extensions and paid plans);
- legitimate interest (security, preventing abuse of free trials, improving products from feedback);
- consent (analytics cookies);
- legal obligation (accounting and tax records).
6. Who receives data
We share data only with service providers that work for us — hosting, e-mail, payment processing, internal messaging (Telegram) and spreadsheets (Google) and, with your consent, Google for analytics and Meta for measuring our ads — and with authorities where the law requires it. We do not sell or rent personal data.
7. Transfers outside the EU
Some providers (for example Google and Telegram) may process data outside the European Economic Area. Such transfers are protected by the European Commission's standard contractual clauses or an adequacy decision.
8. How long we keep data
- device records of extensions: while the installation is active, or until you ask us to delete them;
- form messages: as long as needed to handle the request, then up to two years;
- purchase records: as long as tax and accounting law requires;
- server logs: a short period for security.
9. Your rights
You can ask for access to your data, correction, deletion, restriction, portability, and you can object to processing based on legitimate interest or withdraw consent at any time. Write to info.hotpancake@gmail.com. You may also complain to the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR) or the authority in your country.
10. Children
Our extensions and website are not directed to children under 16, and we do not knowingly collect their data.
11. Changes
We will update this page when our processing changes and show the new effective date at the top.