Overview
Stockd is a grocery management app that helps you track buying patterns and build weekly shopping lists. The Stockd Importer is a Chrome extension that imports your Walmart purchase history into your Stockd account. This privacy policy explains how we collect, use, and protect your data across both products.
Data We Collect
Account Information
Email and password are used solely to authenticate with your Stockd account via Supabase Auth. In the Chrome extension, credentials are never stored — only encrypted session tokens are persisted locally in Chrome's extension storage.
Grocery Item Data
When you use the Stockd app, we store:
- Item names, categories, and quantities
- Purchase cadences (weekly, bi-weekly, monthly, custom)
- Preferred stores
- Purchase dates and scheduling data
Import Data (Chrome Extension)
When you visit your Walmart order history page and initiate an import, the Chrome extension reads the following from the page:
- Item names, quantities, and prices
- Purchase dates
- Order IDs (used for deduplication only)
- Product URLs
What We Do NOT Collect
- We do not collect browsing history
- We do not collect data from any website other than Walmart order pages
- We do not collect payment information, addresses, or personal Walmart account details
- We do not track your browsing activity
- We do not use cookies or third-party analytics
- We do not sell, share, or transfer your data to third parties
How We Use Your Data
Purchase history data is:
- Processed locally in your browser to clean and categorize items
- Sent to your Stockd account (hosted on Supabase) and stored alongside your existing grocery items
- Used to calculate purchase cadences (e.g., weekly, bi-weekly, monthly) based on your buying patterns
All data is associated with your authenticated Stockd account and protected by Row Level Security — only you can access your own data.
Data Storage & Security
- Session tokens are stored in Chrome's
chrome.storage.local, scoped to the extension and inaccessible to websites - Grocery and import data is stored in Supabase (PostgreSQL) with Row Level Security enabled
- Data is encrypted in transit (HTTPS/TLS) and at rest (Supabase infrastructure)
Chrome Extension Permissions
| Permission | Why We Need It |
|---|---|
| storage | Store your authentication session locally so you don't have to sign in every time you use the extension |
| activeTab | Read Walmart order page content when you click the import button |
| host_permissions: walmart.com |
The content script only runs on Walmart order pages to read your purchase history — it does not run on any other website |
Data Retention
Import history and grocery data are retained in your Stockd account until you delete them. You can delete your account and all associated data at any time through the Stockd app.
Third-Party Services
- Supabase — database and authentication (supabase.com/privacy)
Children's Privacy
Stockd and the Stockd Importer are not intended for use by children under 13 years of age. We do not knowingly collect personal information from children.
Changes to This Policy
We may update this privacy policy from time to time. Changes will be reflected in the "Last Updated" date at the top of this page. Continued use of Stockd or the Chrome extension after changes constitutes acceptance of the revised policy.
Contact Us
If you have questions about this privacy policy or your data, please contact us at:
Email: support@stockdapp.com