What we collect, and why.

SteeDelivery finds who makes a product in China and gets it to your door. To do that we keep an account (email, name, saved searches, orders and the shipping addresses you give us), and we never sell that data. The browser extension is the same account, reached from wherever you’re browsing instead of from steeship.com. It doesn’t collect anything the website doesn’t already.

Account. Email, name, and password (hashed; we never see it in the clear) or a Google/Facebook/Discord sign-in. A session cookie keeps you signed in.

Searches and orders. The photos, links or text you search with, the results, and every order’s items, prices, shipping address and status. This is the record that lets you track a package and lets us reach you about it.

Payment. Handled by Stripe. We never see or store your card number. Stripe’s own privacy policy covers what they hold.

Address autocomplete. What you type into the street address field is sent to Google Places to suggest real addresses. Off by default if you’d rather type the whole thing yourself.

Activity log. Sign-ins, cart changes and order actions are logged with the IP address and browser behind them. This is what lets us catch abuse and answer “did I actually place that order”. Not shared outside the company; not used for advertising.

Email. Order confirmations, shipping updates and account emails (password resets, verification) are sent through Resend. We don’t send marketing email unless you’ve asked for it.

Photos. Images you upload to search, and inspection photos from the warehouse, are stored in a private S3 bucket, not publicly listable, only reachable through links we generate.

The extension is the fastest way to start a search: right-click a product photo on any site instead of downloading and re-uploading it. It asks for permission to read any site (<all_urls>) because that photo could be on any site you visit, including ones behind a login the extension has no other way to reach.

What it does with that permission, and no more:

• Fetches the image you right-clicked (or the page’s address, for “source this page”) and sends it to steeship.com to search, and nothing else on the page.
• Runs only when you right-click something or open the extension’s own panel, never in the background on pages you simply visit.
• Holds an access token for your account, stored locally by Chrome and never exposed to the page you’re on. A hostile site can’t read it, only the extension’s own background worker can.

The extension does not read your browsing history, keystrokes, or the content of pages you have not explicitly acted on, and it sends nothing to anyone but steeship.com.

We don’t sell personal data, and we don’t share it with advertisers. Vendors that touch part of an order (Stripe for payment, Resend for email, Google for address lookup and sign-in, our courier for delivery) each see only what their part of the job needs.

Ask us to close your account or delete what we hold on the account page, or by writing to the address below. Order records tied to a completed purchase may be kept as required for accounting, tax, or to resolve a dispute.

stee@steeship.com