Extension Privacy Policy

Effective date: 14 October 2026. This policy describes the current Tamer Zaky Indicators Chrome extension, which adds technical studies to charts at x.thndr.app. It does not describe every feature of the main tamerzaky.com website or Thndr's own services.

Information used for Google sign-in and the user registry

The sign-in screen explains that activation stores the verified Google email for access management and support. When you choose Continue with Google, you request activation and creation of this required user record. Chrome's Google identity service then provides an OAuth token for the openid and email scopes. The extension sends that token securely to Google and to the Tamer Zaky Indicators API at api.tamerzaky.com. The registry independently verifies that the token belongs to this app and reads the verified Google email.

The registry stores the verified email, a one-way keyed digest of the Google account identifier, first and most recent verification times, verification count, extension version, and the version and text of the activation notice shown in the product. It does not store the OAuth token, Google password, broker credentials, chart data, or trading activity. The purpose of this record is to know who uses the extension, manage access, provide support, and send essential extension-related service messages when needed. We will not use the record for promotional or marketing email without separate consent.

Chart information

After sign-in, the extension runs its chart integration only on x.thndr.app and processes the market information and settings needed to provide its disclosed features. Some feature requests may be sent securely to api.tamerzaky.com and may include the selected Egyptian stock symbol and chart interval. These requests are authenticated with your Google token and are used only to return the requested extension output.

The service may cache request inputs and returned output briefly in volatile memory, but it does not permanently store per-user chart history or calculation results. If the extension detects a complete family of old, extension-generated Liquidity drawings, it saves a local recovery copy of those drawings and their chart context in x.thndr.app localStorage before removing them. That recovery copy is not sent to Tamer Zaky servers and is not created during ordinary chart use. The service does not receive broker credentials, holdings, orders, account balance or a broker session, and the extension does not submit trades or use a trading API. The extension does not download executable code.

For internal service reporting, the API counts successful explicit sign-ins and successful extension service requests in anonymous hourly totals. These totals contain no email, account ID, stock symbol, chart interval, IP address, price, or token. They are retained for up to 90 days. Automatic session checks are not counted as sign-ins. The private administrator dashboard also displays the existing user-registry fields described above for account access and support; it is not available to other extension users.

The current API base is api.tamerzaky.com. Google tokens are not written to disk or logs; the API may retain a token digest and its verification result in memory for up to one minute. Actual tokens remain in Chrome's identity service and are not exposed to the chart page.

Sharing and third parties

Google handles authentication under Google's own privacy terms. Thndr provides the chart and its market data under Thndr's terms. The registry is hosted on Tamer Zaky-controlled infrastructure. If an email delivery provider is used for a necessary service message, it receives only the delivery data needed for that message. The extension does not include advertising or analytics SDKs, and we do not sell user data. Ordinary security/access logs may be created by the web server or Cloudflare; they are separate from the user registry.

Retention and your choices

The user record remains while you use the extension unless you delete it. Selecting Delete my data / حذف بياناتي in the popup sends an authenticated deletion request, removes the server record, signs you out, and disables the studies. Ordinary sign-out disables the studies and clears the local session but does not delete the server record. You can also request access, correction, or deletion through the contact link below, and review or revoke the app in your Google Account settings.

Automatic session checks do not create a new user record. After deletion, another browser must request activation again before it can use the service. If an account was administratively blocked, deleting its user record removes the email and consent history but retains a one-way keyed account identifier and the block timestamp while the access restriction remains. This limited security record prevents re-registration from bypassing the restriction; it contains no email, OAuth token, or chart history. Ordinary deletion of an active account does not create this security record.

Limited Use

Tamer Zaky Indicators complies with the Chrome Web Store User Data Policy, including its Limited Use requirements, when handling user data and information received from Google APIs. We use this information only to provide and maintain the extension's disclosed features, account access, support, and security. We do not sell it or use it for advertising. Transfers are limited to providing these features, legal obligations, security, or a business transfer with prior explicit consent. Human access is limited to support you explicitly authorize, security, legal obligations, or aggregated and anonymized internal operations.

Contact and updates

Questions about this extension or this policy can be sent through Tamer Zaky's Messenger contact. If the extension's data practices change, this page will be updated with a new effective date before those changes are released.