EasyDown Privacy Policy
Last updated: September 8, 2026
This policy covers the EasyDown website, accounts and API, and the EasyDown browser extension. Contact: [email protected].
Contents
- Scope and contact
- Information and purposes
- Browser extension and data flow
- Local storage
- Permissions
- Servers and third parties
- Optional AI and video uploads
- Retention and deletion
- Cookies, advertising and analytics
- Security, choices and updates
1. Scope and contact
EasyDown provides public-link tools, an account dashboard, paid credits, an API and a browser extension. This policy explains the processing involved in those services. Third-party websites, media and AI services also have their own policies. Send privacy or data requests to [email protected]; do not email passwords, API tokens or AI keys.
2. Information and purposes
- Links and content: submitted URLs, post and account identifiers, requested pagination parameters, returned public metadata, comments and media references. These support the collection, analysis, export and download tasks you request. Public comments can still contain personal information.
- Accounts and credentials: email, authentication identifiers, API credentials, session details, available capabilities, credit balance and activity, used for authentication, access and usage accounting.
- Payments: Stripe customer, checkout, subscription, invoice and payment-status records, plan and cancellation dates, credit grants, expiry and ledger references. These support billing, credits and support; EasyDown does not store complete payment-card numbers.
- Technical information: IP address, browser/client and device information, request timestamps, response status, limited diagnostics and security events, used to operate the service, prevent abuse, troubleshoot and meet legal obligations.
3. Browser extension and data flow
On supported TikTok, Douyin, Instagram, X/Twitter and Bilibili pages, the extension recognizes the current URL and post or account identifiers and updates the side-panel context. Recognition can happen automatically while browsing; it does not itself submit a paid collection task. The current recognition code does not read page cookies, passwords or your full browsing history. Connecting an account and requesting quotes make API requests. Once you confirm a task, background processing can continue, including further pages within your confirmed limits, without another click for every request.
| Operation | Data and destination |
|---|---|
| Browse a supported page | URL and post/account identifiers are recognized in the browser and used to update the extension context. |
| Connect to EasyDown | The Token authenticates requests to the EasyDown API; the response includes account session, balance and capabilities. |
| Request a quote or confirm collection | Selected links, identifiers and task parameters go to EasyDown. Confirmed operations call upstream services and retain operation results and credit settlement records for recovery and billing consistency. |
| Download or export | Media may be requested from its platform/CDN or a necessary EasyDown proxy. Exported and downloaded files are saved to your device. |
| Use text AI | Selected records and your prompt are sent to the OpenAI, Anthropic or Google service you choose. |
| Analyze a video with Gemini | Your selected video is uploaded to Google. The code attempts to request deletion of the remote file after completion or failure when a file identifier is available. |
4. Local storage
The extension stores the EasyDown Token, your AI key and preferences in extension local storage, without browser sync. These credentials are not confined to the device: they authenticate requests to the corresponding EasyDown or AI service. Current page context also uses browser session storage. Task records and results are held in IndexedDB, separated by EasyDown account. Media segments, merge intermediates and ZIP work files use browser-private file storage (OPFS). Settings exports omit credentials. Local storage is subject to browser/device access controls and storage limits; it is not a promise of permanent backup or encrypted-at-rest storage.
5. Permissions and host access
| Permission | Purpose |
|---|---|
storage | Save local credentials, settings and session context. |
activeTab | Obtain the current tab context for user-facing extension actions. |
downloads | Save requested media and exports, and track completion or failure. |
alarms | Schedule and recover background tasks within the user's limits. |
sidePanel | Display the Chrome side panel; other browser builds use their supported sidebar mechanism. |
| Platform and API hosts | Recognize supported platform pages and short links; authenticate and send requested operations to api.easydown.org. |
| Optional media and AI hosts | Request access to the relevant media/CDN origin or selected AI service when needed. The optional HTTPS host declaration permits asking for these origins; it is not a request to collect all browsing activity. |
The package contains its executable extension code. Remote JSON, text and media responses are processed as data, not downloaded executable extension scripts.
6. Servers and third parties
EasyDown's API processes authenticated requests, task parameters, operation results and settlement records. Upstream parsing services, including TikHub, receive the platform links or identifiers and parameters needed for the requested operation. Shared upstream credentials stay on the server. Media platforms and CDNs receive the network requests needed to retrieve media; some downloads use an EasyDown proxy. Providers can receive technical connection data, including IP addresses at their respective network endpoints.
We use infrastructure, hosting, delivery, database, authentication, security and payment providers to operate these services. Website support, advertising and analytics providers are used where enabled as explained below. Processing locations depend on the providers involved and may be outside your country. EasyDown does not sell personal information. We may disclose information as required by law or reasonably necessary to protect the service, users or the public. We do not control third-party content availability or those platforms' privacy practices.
7. Optional AI and video uploads
AI is optional. When you choose an AI operation, the extension shows the provider and data scope before sending. Text analysis sends selected records and your prompt to OpenAI, Anthropic or Google using your own provider key. Records can include public author details, links and comments; excluded raw fields do not make the remaining content anonymous. The current text preparation excludes raw platformData and media assets. Requests go directly from the extension to the selected provider; AI usage is billed by that provider, separately from EasyDown credits.
Gemini video analysis uploads the selected video bytes to Google's file service, waits for processing and sends the analysis prompt with the file reference. This can disclose visual and audio content. After completion or failure, cleanup attempts to delete the remote file if its identifier was obtained. Network errors, interruption or provider errors can prevent cleanup; immediate deletion is not guaranteed. Provider retention, human review and model-training treatment depend on the service, terms and account settings. We do not promise universal zero retention or exclusion from training. Review the relevant OpenAI, Anthropic and Google policies and API terms before sending sensitive material. AI outputs are inferences, not verified platform statistics.
8. Retention and deletion
- Sign out: clears saved credentials and pauses the relevant account's data tasks. It does not delete all local results or server records.
- Clear local account data/tasks: removes the corresponding local task records and associated temporary media where cleanup completes. This does not erase server operation or billing records.
- Uninstall: removes extension-managed browser data through the browser's uninstall process. It does not remove files already saved to your Downloads folder or other chosen folders; delete those separately.
- Server requests: email us to request access or deletion of eligible account data. We may need to verify control of the account without requesting your secret credentials. Operation results support recovery, reuse and settlement consistency. Account, financial, abuse-prevention and security records are retained for as long as reasonably needed to provide services, resolve disputes and meet legal obligations. There is no general promise of automatic deletion after 24 hours or permanent storage of third-party media.
- AI copies: local cleanup does not delete provider-held requests or uploads. Their retention rules and available controls apply; Gemini's cleanup attempt has the limits described above.
9. Website cookies, advertising and analytics
The website uses essential authentication, security and preference cookies where required. Other website pages may load advertising, Google Analytics, Plausible or Crisp support services, which may process usage and device data and use their own cookies subject to applicable rules. The privacy policy and browser-extension introduction routes do not actively load those advertising, analytics or chat scripts. Navigation across this boundary uses a full page load to establish a separate document context. Ordinary email links provide support on these pages.
This does not mean that existing browser cookies disappear or that infrastructure stops recording access/security logs. The extension itself currently includes no advertising or telemetry, but connecting accounts, executing tasks, downloading media and using AI still generate the service requests described above.
10. Security, user choices, children and changes
We use reasonable access controls, encryption in transit, restricted service credentials and signed payment notifications. No online service or local device can guarantee absolute security. You can decline optional permissions or AI, pause tasks, clear local data, revoke a Token or provider key through the relevant account controls, and delete downloaded files yourself.
Depending on your location, you may request access, correction, deletion, restriction, objection or a portable copy of eligible personal information by emailing [email protected]. Describe the affected service and account email; some financial and security records may need to be retained. EasyDown is not directed to children under 16 and does not knowingly collect their personal information. Contact us if you believe a child provided such data. We update this page and its date when practices change.