Privacy Policy: FedSignals Chrome extension

Last updated: 2026-10-30 · Publisher: FedSignals Data · Contact: fedsignals.alerts@gmail.com · Online: https://fedsignalsdata.com/privacy/extension

The FedSignals Chrome extension alerts you to new public government contract opportunities that match your saved searches. By default it uses the FedSignals service: you sign in with Google and the extension asks our service for new matches.

What the extension sends us

Your Google sign-in token (to identify you), your saved searches' filters, and which product you're using. It sends nothing about the websites you visit.

Who we are

FedSignals Data ("we") publishes the FedSignals Chrome extension and FedSignals for Google Sheets, and runs the FedSignals service they connect to. Contact: fedsignals.alerts@gmail.com.

Where the data comes from

Contract data comes from public, official sources: SAM.gov contract opportunities and USAspending.gov award data (U.S. government), and TED tenders (Publications Office of the European Union). We collect the U.S. data once a day into our own cache. EU tenders are looked up when a Pro search asks for them.

What the FedSignals service stores

The service runs on Cloudflare Workers, with a Cloudflare D1 database. When you sign in with Google, Google tells us your Google account ID and email address. We store, per product:

• Your account: your Google account ID, a salted SHA-256 hash of your email address (not the email address itself), your plan (Free or Pro), and if you subscribe, your Stripe customer ID, Stripe subscription ID, subscription status, billing period and renewal date.
• Your saved searches: for each saved search, its ID and the filters you set (for example keywords, NAICS codes, set-asides, agency and sources), with the time it last ran. This is how we enforce plan limits and avoid sending you the same data twice.
• What you've already seen: short hashes of the records already sent for each saved search, so that only new matches are flagged.
• Usage counters: how many requests your account made today, for the daily limit.

Our cache (Cloudflare KV) holds only the public contract data; it holds nothing about you. Our code does not write your email address, sign-in token or keys to logs. Cloudflare, our host, processes each request (including your IP address) to deliver it. Our Worker's request logs (Cloudflare Workers Logs) record request details such as the time, path and status; they are kept for 3 days on our Cloudflare plan (7 days from December 1, 2026, when Cloudflare's new log retention starts) and then deleted automatically.

Payments

Payments are processed by Stripe. When you start a checkout, we send Stripe your email address and your account ID so it can create your subscription. Stripe collects your card details directly; we never see or store your card number. Stripe's privacy policy: https://stripe.com/privacy

Who else receives data

• Google: to check your sign-in token.
• Stripe: for payments, as above.
• TED (api.ted.europa.eu): when a Pro search includes EU tenders, we send TED your search keywords and filters (without your identity) and cache the answer for up to 2 hours.
• Cloudflare: our hosting provider.

We do not sell your data, share it for advertising, or use it for advertising. We use no analytics or tracking.

Retention

• Saved searches unused for 30 days are deleted automatically, and the list of records already sent for a search is deleted after 60 days without updates.
• Daily usage counters are deleted after 2 days; cached TED answers expire after 2 hours.
• Request logs at Cloudflare (Workers Logs) are deleted after 3 days (7 days from December 1, 2026).
• Your account record (plan and Stripe IDs) is kept while you use FedSignals, until you delete it (below).

Cancelling and deleting your data

• Cancel Pro: use Manage subscription (extension: Account tab; Sheets: the FedSignals sidebar). It opens Stripe's billing page, where you can cancel, change your card, see invoices or switch between monthly and yearly. A cancelled subscription stays Pro until the end of the period you've paid for, then moves to Free.
• Delete my data: use Delete my data in the same places and confirm. We immediately delete your account record (the hashed email ID, plan and Stripe IDs), saved searches, the list of records already sent to you, and usage counters, for both the Chrome extension and the Sheets add-on. If you have an active subscription, we cancel it immediately first (no further charges; no refund for the current period) and tell you so. If the cancellation fails, nothing is deleted and you can try again. The extension also clears its data in your browser; the add-on removes its settings and keys for your account (the tabs in your spreadsheet are your own file).
• Stripe keeps its own payment records as the law requires. Request logs at Cloudflare expire after 3 days (7 days from December 1, 2026).
• If you can't use these buttons, email fedsignals.alerts@gmail.com from the Google account you signed in with and we will cancel or delete for you.

Children

FedSignals is not directed to children under 13.

Changes

We post changes on this page and update the date above.

Data kept in your browser

• chrome.storage.local on your device (never sync) holds your saved searches, watchlist, recent matches and settings, plus any optional keys (see Advanced mode).
• If you sign in through Google's sign-in page, the sign-in token is kept only in chrome.storage.session (in memory). It is gone when Chrome closes, and Sign out removes it.
• Removing the extension deletes all of this.

Permissions

• identity: Sign in with Google (email address only).
• storage: saves your searches, watchlist and settings on your device.
• alarms: checks your saved searches on a schedule.
• notifications: shows a desktop alert for new matches and deadline reminders.
• Host access: only the FedSignals service (fedsignals-hosted.fedsignals-alerts.workers.dev). The extension has no content scripts and cannot read the pages you visit, your tabs or your history.
• Optional host access (asked for only if you turn on Advanced mode): api.apify.com, api.sam.gov and api.ted.europa.eu.

Advanced mode (optional): your own keys

If you turn on Advanced mode and enter your own Apify token or SAM.gov API key, the extension stores them in chrome.storage.local and sends requests with them straight to that service (Apify: https://apify.com/privacy-policy, SAM.gov: https://sam.gov/content/privacy). Your keys never reach our service. TED searches in this mode go directly to api.ted.europa.eu without your identity.

Chrome Web Store user data disclosure

The extension handles personally identifiable information (your email address, from Google sign-in) and authentication information (your Google sign-in token, and optional API keys stored only on your device). It uses them only to provide FedSignals. It does not sell them or use them for unrelated purposes or for credit decisions.