Privacy policy
Last updated: 17 October 2026
This policy covers WhereFrom, the Chrome extension, WhereFrom Pro, and this website. Ahmed Gamal, an independent developer in Egypt, makes WhereFrom and is responsible for the data described here.
The short version
- Everything WhereFrom reads from the pages you inspect stays inside your browser. It is never sent to us or to anyone.
- WhereFrom has no analytics and no advertising.
- For WhereFrom Pro, the extension sends your license key and a random ID of the installation to our license server, to check that the key works. Nothing else.
- Payments are handled by Paddle. We never see your card.
The extension
On the sites you enable, WhereFrom reads the JSON responses a page loads, the data inside the page, and the text and styles of what you pick. It keeps them in the memory of the tab, and they are gone when you reload or close the page. Password fields are never read, and fields named like passwords or tokens are hidden before anything is kept.
If you connect Figma for the design check, your Figma token stays on your computer and is sent only to Figma. The designs and pictures you open are kept on your computer, so a check can run again without asking Figma.
The full statement for the extension, with every permission it asks for, is published with it in the Chrome Web Store.
WhereFrom Pro in the extension
- On your computer: when your 14 free days started, a random ID made for this installation, your key, and what the license server last said about it.
- Sent to the license server: your key and that random ID, when you activate the key and every few days after, to check it still works. When you sign a computer out, its ID is removed.
- Never sent: anything from the pages you inspect, your Figma account or designs, or your browsing.
Buying
Payments are handled by Paddle.com, the Merchant of Record for WhereFrom Pro. Paddle collects what it needs to take the payment, charge the right tax and send the receipt, such as your name, email, country and payment details, under Paddle’s privacy notice.
From Paddle, we receive your email, your country, the plan you bought, what you paid, and Paddle’s IDs for the order, the subscription and you as a customer. We never receive your card or bank details.
The license server
Our license server runs on Cloudflare. For each key, it keeps:
- the key, the plan, and Paddle’s IDs of the order, the subscription and the customer;
- your email, to send you your key again when you ask;
- the state of the subscription that Paddle reports, such as renewed, cancelled or refunded;
- for each computer that uses the key: its random ID, and when it was first and last used.
Cloudflare handles the requests that reach the server, and with them your IP address, to deliver them and protect the service, under Cloudflare’s privacy policy. The server itself does not keep IP addresses.
When your key is emailed to you, after a purchase or when you use “Lost your key?”, the email is sent through Resend, which receives your email address and the message.
This website
This website has no analytics and sets no cookies of its own. It remembers your language, and a purchase that is still finishing, in your browser’s local storage. When you open a checkout, Paddle’s script runs on the page and may set what Paddle needs for the checkout.
How long data is kept
The license server keeps a key’s data for as long as the key exists. Paddle keeps order records as tax and accounting law require. A computer’s ID is removed when you sign it out.
Your choices and rights
- Ask us what we keep about you, to correct it, or to delete it. If we delete your email from the license server, we can no longer send you your key.
- Sign a computer out of your key at any time, from WhereFrom Pro in the extension.
- Removing the extension deletes everything it kept on your computer.
- You can complain to the data protection authority of your country.
Changes
If this policy changes, the new version is published here and its date is updated.
Contact
Ahmed Gamal, theahmedgamal.dev