Privacy Policy

Last updated: May 2026

1. Data Controller

Dennis Redder / eingenetzt Email: dennis.redder@eingenetzt.net For full contact details, see our Imprint.

2. Overview: What Data Does InFilly Collect?

Short answer: As little as possible. InFilly is designed as a privacy-first product. The Chrome extension itself does not collect, store, or transmit any personal data to our servers.

3. The Chrome Extension

3.1 Local Data Processing

All message templates you create are stored exclusively in your browser using Chrome’s storage API (chrome.storage.sync). This data is synchronized via your Google infrastructure if you are signed into Chrome — we have no access to it.

3.2 LinkedIn Profile Data

InFilly reads information from the LinkedIn interface (e.g., name, company, job title of the displayed profile) to auto-fill placeholders in your templates. This data is processed exclusively on the client side (in your browser), is not stored, and is never transmitted to external servers.

3.3 Permissions

The extension requests only the following Chrome permissions: activeTab (access to the currently active tab), storage (local storage of templates and settings), alarms (periodic license checks and counter resets), webRequest (outreach tracking on linkedin.com only), and host_permissions for linkedin.com (reading profile pages). No wildcard permissions or access to other websites are requested.

3.4 Outreach Tracking

InFilly’s outreach dashboard tracks the number of messages and connection requests you send on LinkedIn. This data is stored locally in your browser using Chrome’s storage API. It is never transmitted to our servers or any third party. You can view your stats in the extension and reset them at any time.

4. Payment Processing (Pro Version)

Payment processing is handled by Lemon Squeezy (Lemon Squeezy, LLC, USA), which acts as the Merchant of Record. Lemon Squeezy collects and processes your payment data (email address, payment method, billing address) independently. We only receive a license key, your email address, and payment status from Lemon Squeezy. For Lemon Squeezy’s privacy practices, see: lemonsqueezy.com/privacy.

4.1 License Validation

To verify your Pro status, the extension sends your license key encrypted (HTTPS) to the Lemon Squeezy API (api.lemonsqueezy.com). No other personal data is transmitted in this process.

5. Website (infilly.app)

5.1 Hosting

The website is hosted by Strato AG (Berlin, Germany). When you visit the website, connection data (IP address, timestamp, pages accessed) is automatically stored in server log files. This is required for technical operation (Art. 6(1)(f) GDPR).

5.2 Cloudflare CDN

We use Cloudflare (Cloudflare, Inc., USA) as a Content Delivery Network. Cloudflare processes technical connection data in this context. Cloudflare is certified under the EU-US Data Privacy Framework. For more information: cloudflare.com/privacypolicy.

5.3 Fonts

This website uses locally hosted fonts. No external connections to Google Fonts or other font CDNs are made.

6. Your Rights

You have the right to access your stored data (Art. 15 GDPR), rectification of inaccurate data (Art. 16 GDPR), erasure of your data (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and objection to processing (Art. 21 GDPR).

To exercise your rights, contact: dennis.redder@eingenetzt.net. You also have the right to lodge a complaint with a supervisory authority.

7. Changes

We reserve the right to update this privacy policy as needed, for example when introducing new features or in response to changes in legal requirements. The current version is always available on this page.