NASTALEEQ FONT WEBKIT - PRIVACY POLICY
Last Updated: August 16, 2026
Version: v8.0
INTRODUCTION
Nastaleeq Fonts Webkit is a Chrome extension that applies Nastaliq-style fonts to Urdu, Arabic, and Persian text and their sub languages on any websites. We are committed to protecting your privacy and ensuring you have a positive experience.
This privacy policy explains:
What information we collect
How we use it
Your rights
How to contact us
By using this extension, you agree to this Privacy Policy. If you do not agree, please uninstall the extension.
INFORMATION WE COLLECT
User Account Information
What we collect:
Email Address
Username
Password (hashed by Supabase Auth, we never see plaintext)
Account Creation Date
Pro / Free tier status
To save your settings across devices
To manage Premium features
To send you important account notifications and updates
Supabase (cloud database in the Southeast Asia "Singapore" region)
You can delete your account anytime via Settings → Account
Until you manually delete your account
User Payment Verification Information
What we collect:
Email Address
Full Name
Phone Number (Optional)
Transaction Id / Reference Number
To cross verify users payment transactions
To provide premium features to corresponding user email address
To ensure the security and integrity of our payment system
Supabase (cloud database in the Southeast Asia "Singapore" region)
As soon as you manually delete your account, your payment verification information will also be deleted from our database.
Settings & Preferences
What we collect:
Font choices (Noto, Gulzar, Alvi, Jameel)
Text size, line height, word spacing
Enabled scripts (Urdu, Arabic, Persian, etc.)
Custom fonts you upload (for Pro users)
Highlighter colors and custom colors
Text-to-speech (TTS) settings: voice, speed, pitch, volume
Custom keyboard shortcuts
Disabled sites (which websites you turn fonts off on)
Theme preference (dark/light)
To apply your preferred fonts and settings
To personalize your experience
To sync across devices (if you're logged in)
Locally in your Chrome browser (indexDB)
Also synced to your Chrome account (chrome.storage.sync) if you're logged in
Indefinitely (until you clear browser data or uninstall the extension)
Screenshots/Snips
What we collect:
Screenshots you take using the "Snip" tool (Alt+S)
Image data (as base64-encoded PNG files)
Captions you add to screenshots
To let you organize, download, and export your screenshots
ONLY locally in your browser (chrome.storage.local)
NEVER sent to our servers
NOT synced to your Google/Supabase account
Until you delete them manually or clear your browser data
We keep up to 30 most recent screenshots; older ones auto-delete
Pro users can export all screenshots as a .ZIP file
Cached Fonts
What we collect:
Large font files (Alvi Nastaleeq ~5MB, Jameel Noori Nastaleeq ~5MB)
Downloaded from GitHub/CDN on first use
To avoid re-downloading fonts on every page load
To work even if you go offline
Locally in IndexedDB (browser's local storage)
NEVER sent to any server
Up to 30 days; auto-clears if unused
You can manually clear via Settings → Advanced → "Clear Font Cache"
Text-to-Speech Data
What we collect:
Text you select to hear aloud
Which language you choose
Speed, pitch, volume preferences
To generate audio and play it back
Text is sent to Google Translate API (Google's servers)
Audio is returned and played in your browser
NOT permanently stored by us or Google
See Google Translate Privacy Policy for their data practices
Audio requests are encrypted (HTTPS)
Input Method Data
What we collect:
Latin text you type (for transliteration to Urdu)
English word fragments (for autocomplete suggestions)
To suggest Urdu translations as you type
To autocomplete English words
Text is sent to Google Input Tools API and Datamuse API
Not permanently stored by us
Google and Datamuse may log queries per their privacy policies
Technical Data
What we collect:
Extension version you're using
Chrome version (inferred, not explicitly logged)
Sites you visit (only to know if fonts should be applied)
JavaScript errors (if any)
To identify and fix bugs
To improve performance
Locally in your browser console logs
NOT sent to our servers unless you report a bug
HOW WE USE YOUR INFORMATION
| Data | Purpose | Legal Basis |
|---|---|---|
| Email/username | Account management | Provided voluntarily by user |
| Payment Information | Verify payment & activate Pro | Needed to confirm your purchase and unlock Pro features |
| Settings | Personalization | Needed to apply and remember your preferences |
| Screenshots | User control | Provided voluntarily by you via the Snip tool |
| Fonts | Font delivery | Needed for core extension functionality |
| TTS text | Audio generation | Sent only when you request text-to-speech playback |
| Technical data | Bug fixes | Collected locally to help diagnose issues if you report a bug |
DATA SHARING
We do not share your personal data with anyone except:
- Supabase (for logged-in users)
Stores your email, username, Pro status
Signs a Data Processing Agreement
Based in Southeast Asia (Singapore) with SOC 2 certification
- Google (for TTS and transliteration)
Text you enter is sent to Google's APIs
See Google's privacy policy for their practices
Essential for extension functionality
- Github (for font downloads)
Font files are hosted on GitHub
Your request is logged by GitHub's servers
- Datamuse (for English autocomplete)
Word fragments are sent to Datamuse API
Datamuse does not store queries
Open-source, non-commercial service
❌ Sell your data
❌ Collect analytics (no Google Analytics, Mixpanel, etc.)
❌ Show ads
❌ Track your browsing history
❌ Use your screenshots for any purpose
YOUR PRIVACY RIGHTS
Access Your Data
You can see all data we hold:
Open extension → Settings → Account
Click "Export My Data"
Download a JSON file with everything
Delete Your Data:
Clear Chrome browsing data (Settings → Privacy → Clear browsing data)
Select "Extensions" and "All time"
This clears local settings but keeps your online account
Open extension → Settings → Account
Click "Delete Account"
Confirm with your email
All data deleted from servers within 7 days
Your account cannot be recovered
Opt-Out
Uninstall the extension (Settings → Extensions → Remove)
All local data is automatically deleted
DATA RETENTION
| Type | Retention | How to Delete |
|---|---|---|
| Account | Until you delete account | Settings → Account → Delete |
| Payment Information | Until you delete account | Settings → Account → Delete |
| Settings | Indefinitely | Uninstall extension or Clear data |
| Screenshots | 30 days (auto-delete old ones) | Manual delete in gallery |
| Fonts | 30 days (auto-expire) | Browser Settings → Clear cache & files |
| TTS | Not stored (sent to Google) | N/A |
| Session tokens | ~1 hour (auto-refresh) or deleted on logout | Logout or delete account |
SECURITY
We take security seriously:
✅ What we do:
Use HTTPS for all connections (encrypted)
Passwords hashed by Supabase Auth (never stored plaintext)
Local data stored in Chrome's encrypted storage
Regular security audits
⚠️ Limitations:
Local browser storage is only as secure as your computer
If someone has access to your computer, they can access local data
🚨 Report Security Issues:
Do not post security bugs publicly
Email: nastaleeq-support@asaleem.com
We will respond within 48 hours
CONTACT US
Questions about this Privacy Policy?:
Email: admin@asaleem.com
Support & Bug Reports:
Open extension → Settings → Help & Support
Or email: nastaleeq-support@asaleem.com
CHANGES TO THIS POLICY
We may update this Privacy Policy. We will:
Update the "Last Updated" date
Post the new version here
Notify you via extension if changes are significant
If you disagree with changes, uninstall the extension.
COMPLIANCE
This extension complies with:
California Consumer Privacy Act (CCPA)
UK Data Protection Act (DPA 2018)
Chrome Web Store Developer Program Policies
Chrome Web Store User Data Policy
The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.
This policy is written for CCPA and UK DPA compliance. We do not currently make specific representations regarding GDPR (EU) compliance
COOKIES & TRACKING
Cookies: This extension does NOT use cookies.
Tracking: This extension does NOT use tracking pixels, beacons, or analytics.
Exceptions: Third-party services (Google, Datamuse) may use their own cookies. See their privacy policies for details
DO NOT TRACK
Some browsers send a "Do Not Track" (DNT) signal. Our extension:
Respects DNT preferences
Does not override browser privacy settings
Does not use fingerprinting