Kona Extension Privacy Policy

The Kona browser extension helps you earn cashback while shopping online. It detects when you're on a partner merchant's website, shows your available cashback rate, and lets you activate cashback tracking with one click. It also includes an AI assistant that can help you find deals on the page you're browsing.

URLs you visit

The extension checks the URL of each page you visit against our list of partner merchants. This matching happens locally in your browser — we do not send your browsing history to our servers. Only when you're on a recognized partner merchant site does the extension activate.

Page content (when using AI features)

When you use the "Ask Kona" AI chat feature, the extension reads product names, prices, and sale information from the current page to provide relevant answers. This data is sent to the Anthropic API (our AI provider) to generate responses and is not stored permanently. Page scraping only occurs when you actively use the AI chat — not passively while browsing.

Cashback activation data

When you click "Activate Cash Back," we record the merchant name, cashback rate, and timestamp locally in your browser. This data is used to show your activation status and does not include any personal information about your purchases.

API key (optional)

If you use the AI chat feature, you may provide an Anthropic API key. This key is stored locally in your browser using Chrome's storage API and is never sent to Kona's servers.

The Kona extension does NOT collect or transmit: your browsing history, passwords or form data, personal information, payment or financial information, data from non-merchant websites, or any data when the extension is not actively being used.

Data collected by the extension is used exclusively to: match the current website to our partner merchant database, display relevant cashback rates and offers, activate cashback tracking when you choose to, power the AI shopping assistant when you use the chat feature, and remember your activation status so you don't need to reactivate.

The extension communicates with the following services:

Kona API (withkona.com): To fetch the current list of partner merchants and cashback rates. No personal data is sent in these requests.

Anthropic API (api.anthropic.com): When you use the AI chat feature, your question and the current page's product data are sent to Anthropic to generate a response. Anthropic's privacy policy governs their handling of this data.

Google Favicons (google.com/s2/favicons): To display merchant logos. Only the merchant's domain name is sent in these requests.

All extension data is stored locally in your browser using Chrome's built-in storage APIs. This includes: cached merchant data (refreshed every 5 minutes), cashback activation status (expires after 24 hours), AI chat API key (if provided), and extension preferences. No extension data is stored on Kona's servers.

activeTab: Allows the extension to read the current page when you interact with it (click the popup or use AI chat). Does not grant access to other tabs or background browsing.

storage: Allows the extension to save settings, cached merchant data, and activation status locally in your browser.

tabs: Allows the extension to detect when you navigate to a new page so it can check for partner merchants.

You have full control over the extension: you can disable or uninstall it at any time through Chrome's extension settings (chrome://extensions). Uninstalling the extension immediately removes all locally stored data. You can clear the extension's stored data at any time by clicking "Clear browsing data" in Chrome settings with "Cookies and other site data" selected.

The Kona extension is not intended for use by individuals under the age of 18. We do not knowingly collect data from children through the extension.

We may update this privacy policy when we add new features to the extension. Significant changes will be communicated through an extension update notification. Continued use of the extension after changes constitutes acceptance of the updated policy.

For questions about this privacy policy or the extension's data practices, contact us at support@withkona.com.