Last updated: August 5, 2026

Web advertising measurement disclosure: privacy-web-ads-2026-08-v2

Redcart AI helps shoppers compare products, discover visually similar items, manage orders, and use Redcart points and cashback features. This Privacy Policy explains how Redcart AI and the Redcart Chrome extension collect, use, and protect information.

Information We Collect

When you use Redcart, we may collect account information such as your name, email address, login status, order information, cart activity, wallet balance, support messages, and other information you choose to provide.

When you use the Redcart Chrome extension, the extension may process authentication tokens from redcart.ai after you sign in, product image URLs, the current page URL and domain, product title and price signals, shopping page signals, checkout or confirmation page signals, and order totals used to estimate eligible cashback or points. The extension also stores local settings, activation state, cached search results, and local cashback or points history in Chrome storage on your device.

How We Use Information

We use information to provide Redcart's single purpose: AI-powered product image comparison and eligible Redcart cashback or points tracking while shopping. This includes authenticating your account, sending product image URLs or uploaded product images to the Redcart backend for search, showing similar products, maintaining wallet and recent-view data, estimating eligible cashback, preventing duplicate activity, improving reliability, and providing customer support.

Optional Web Advertising Measurement

When you allow website advertising measurement, Redcart may load the Meta Pixel on redcart.ai to measure page views, completed registrations, and your first product save or Collection creation. For completed registrations and first activation only, Redcart may also send the matching event directly to Meta through the Meta Conversions API. The browser and server copies use the same event identifier so Meta can deduplicate them.

Meta matching data is limited to a SHA-256 transformed verified email and Redcart user identifier, IP address, browser user agent, the page URL where the event occurred, and Meta's _fbp and _fbc cookie values when present. Redcart does not send product, Collection, order, payment, health, or other sensitive content in these Meta conversion events.

On the Redcart website, and only when your saved choice, region, and browser privacy signal permit it, Redcart may measure whether a governed Redcart campaign led to account registration or a first qualifying activation. Redcart may send the applicable conversion event, event time and page URL, a platform-specific event identifier, relevant advertising click identifiers, and limited request context such as IP address or user agent when necessary to Meta, Pinterest, Reddit, and Google Ads. When approved for a platform, a normalized verified email may be transformed with SHA-256 and a separate platform-specific external identifier may be used for conversion matching. Hashed email addresses remain controlled advertising measurement data; they are not anonymous data.

Redcart does not send your name, phone number, address, collection contents, referral details, full customer profile, or Redcart internal user and canonical conversion identifiers as part of this browser measurement envelope. Each advertising platform receives its own event and external identifiers so the same identifier is not shared across platforms.

Meta matching data and request context are stored together only as an encrypted delivery payload. That payload is scheduled for deletion within 24 hours after terminal delivery and never later than seven days after the event. Separately captured click identifiers and raw acquisition tokens are scheduled for deletion after 90 days. Governed campaign attribution, consent records, delivery status, and redacted audit evidence may be retained for up to 25 months, subject to a shorter applicable legal or platform requirement.

Chrome Extension Data Practices

The Redcart Chrome extension runs on shopping pages so it can detect product pages, show the Redcart button, extract product images, and detect checkout or order confirmation signals for cashback and points features. Broad host access is used only for these user-facing shopping features. We do not sell extension data, do not use extension data for personalized ads, and do not transfer extension data to data brokers or advertising platforms.

Chrome extension data is not used for Web advertising measurement. Website advertising measurement code cannot read or transfer extension authentication tokens, page observations, shopping signals, cashback data, or extension-local storage to advertising platforms.

The extension sends information to Redcart over HTTPS. Some product search requests may be processed with third-party providers used by Redcart's backend, such as shopping search, marketplace, image hosting, translation, or AI services, only as needed to provide or improve product search and shopping features.

Limited Use Statement

Redcart's use and transfer of information received from Chrome extension APIs complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. We limit use of extension data to providing or improving Redcart's disclosed shopping comparison, cashback, wallet, security, support, and reliability features.

Security

We use HTTPS and reasonable administrative, technical, and organizational safeguards to protect information. Authentication tokens are used to connect the extension to your Redcart account and should be treated as sensitive credentials.

Your Choices

Customer consent controls on redcart.ai are temporarily unavailable while Redcart develops an updated frontend design. Optional website analytics and advertising measurement remain off for visitors who do not already have a current saved choice, and the website does not create a choice automatically. Advertising measurement initializes off. An enabled Global Privacy Control signal overrides a saved advertising choice, and advertising stays off when Redcart cannot resolve whether the feature is available in your region. A later opt-in does not send conversions that occurred while measurement was denied.

You can disable or uninstall the Chrome extension at any time. You can clear extension data from Chrome storage, log out from the extension, or contact us to request help with account data. Some local extension history may remain on your device until you clear it or uninstall the extension.

Contact

If you have questions about this Privacy Policy or Redcart's data practices, contact us at richard@redcart.ai or visit https://www.redcart.ai/contact.