The extension connects only to abaishraqa.com. When you sign in, your email and password are sent once over HTTPS; the password is not stored in the extension. The server returns a random access token, stored locally; the server keeps only a hashed copy (max 2 devices). We store your practice answers and bookmarks to show your progress, a short browser description to label your devices, and your IP address only to limit repeated sign-in attempts (deleted automatically within 24 hours). We do not read your browsing, use analytics or ads, or sell or share your data. Payments happen only on abaishraqa.com via Stripe. Signing out deletes the token; uninstalling removes all local data. Full policy: https://abaishraqa.com/privacy-extension.php?lang=en