Privacy Policy
1. Scope
This Privacy Policy describes how hweihwang ("we", "us", "our") handles personal data for hweihwang.com and all related software products and services, including apps, connectors, browser extensions, desktop and mobile apps, and APIs (collectively, the "Services").
2. Data We Collect
Data you provide directly
- Contact details such as email address when you reach out for support or legal requests.
- Information you submit in forms, feedback, or support messages.
Connector and authentication data
- OAuth tokens, refresh tokens, granted scopes, and connector metadata required to run authorized features.
- Account identifiers needed to map jobs or sync operations to your connected services.
Operational and diagnostic data
- Job logs, run history, error diagnostics, and feature usage telemetry required for reliability and support.
- Device or app metadata needed for security, abuse prevention, and troubleshooting.
Billing data
- For paid features, payment processing is handled by third-party providers; we do not store full card numbers.
3. How We Use Data
- Operate and provide the Services you request.
- Authenticate accounts and maintain connector functionality.
- Improve performance, reliability, and product quality.
- Respond to support, legal, and security issues.
- Enforce terms, prevent abuse, and comply with legal obligations.
4. Browser Extension Data
For Facebook Reset & Feed Control, previously named Bulk Group Leaver & Facebook Cleanup, Facebook list data, selected queues, Always keep items, Feed rules, hidden-post records, run history, and settings are stored locally in Chrome storage and IndexedDB on your device. This can include names, URLs, avatar URLs, activity hints, selected actions, and run results for Facebook groups, Pages, follows, friends, and sent friend requests, and the text, date, audience and link of your own posts when you load Your posts. Download my data saves your words, mutes, hidden posts, and History as one JSON file on your device, and Delete all data removes them; your license is kept. The Privacy switches (Block Facebook tracking, Hide when I read and type, and Block Facebook on other websites) run inside Chrome with request rules and a script in Facebook's page and send nothing to us. Block Facebook on other websites asks Chrome for access to all sites only when you turn it on. We do not receive your Facebook cleanup lists or Feed content.
Pro activation and validation may send a license key, checkout session identifier, sale identifier, product identifier, activation status, revocation status, and payment/license status between the extension, Gumroad, and our activation service. Server-verified delivery records also contain purchase dates, amounts, fees, and test/refund/dispute status. This supports license delivery, reconciliation, refunds, disputes, and abuse prevention. Checkout records expire after 30 days; license/sale indexes and delivery records expire after 400 days. We do not collect your Facebook password, card number, bank data, or full payment details.
Facebook Reset health reports start only after you click OK, on the welcome page, in the panel, or on Facebook. Then the extension sends one report a day with the date, release, Facebook's interface language, Free or Pro, install age in ranges, whether Feed and Block Facebook tracking are on, and counts in ranges of panel opens, Feed checks, hidden posts by kind and Feed errors, runs started and why they stopped, changes made, failed or unconfirmed by action, the rating request, checkout and Pro activation, the extension's own errors, and Facebook's numeric error codes. Nothing counted before OK is sent. A report never contains Facebook identifiers, names, relationships, post or page contents, links, rules, words, raw history, email, or license keys. Each report has a new random ID, so reports cannot be linked to you or to each other, and PostHog receives them with geographic enrichment and person profiles off. Cloudflare keeps a report's ID for 7 days to drop repeats; PostHog keeps reports under the shared 12-month retention plan. Turn health reports off in Settings to stop counting and sending. Versions up to 0.10.0 instead sent optional usage counts, off by default, with a random 45-day diagnostic ID; Cloudflare kept their summaries for up to 45 days. Contact us with the approximate date and version for a PostHog deletion request about those. See the full product disclosure.
The Facebook Reset website sends privacy-limited PostHog events with a random browser-session ID, product-page path and title, locale, campaign and referrer host, store or Pro clicks, scroll thresholds, load timing, and filtered JavaScript errors. Query strings, Facebook page content, geographic enrichment, person profiles, autocapture, and session replay are excluded. PostHog processes normal network metadata. The site also uses the disclosed 30-minute first-party source cookie for fixed outbound attribution.
Our use of data handled through Chrome extension permissions follows the Chrome Web Store User Data Policy, including the Limited Use requirements. We do not sell extension user data, use it for personalized advertising, use it for creditworthiness or lending, or allow humans to read Facebook cleanup data unless you explicitly share it for support or access is required for security or legal reasons.
The extension is an independent tool and is not affiliated with, endorsed by, or sponsored by Meta or Facebook.
5. Google API Data Use
If you connect Google services, our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- We only use Google user data to provide user-facing features you explicitly enable.
- We do not sell Google user data.
- We do not use Google user data for advertising.
7. Data Retention
We keep data only as long as needed for service operation, legitimate business needs, legal compliance, and dispute resolution. Retention may vary by data type and product context.
8. Security
We implement reasonable technical and organizational safeguards to protect data, including access controls and secure handling of sensitive credentials. No method of storage or transmission is fully guaranteed secure.
9. International Processing
Depending on infrastructure and providers, your data may be processed in different countries. Where required, we apply appropriate safeguards for cross-border data transfers.
10. Your Rights
Subject to applicable law, you may have rights to access, correct, delete, or restrict processing of your personal data. You may also withdraw connector permissions by disconnecting integrations in-app or through the source platform.
11. Children's Privacy
The Services are not directed to children under 13, or the equivalent minimum age in your jurisdiction. We do not knowingly collect personal data from children in violation of applicable law.
12. Policy Updates
We may update this Privacy Policy periodically. Updated versions are posted at this URL with a revised effective date.
13. Contact
For privacy requests or questions, contact [email protected].