Privacy Policy

When you use the LessMissed Chrome extension during an active task session, we collect:

• Eye gaze coordinates (x, y pixel positions on the page)
• Scroll position and scroll depth during the session
• Click events (position only — not content or form fields)
• Page URLs visited during active task sessions
• Anonymous session ID (generated per session, not linked to identity)
• Timestamps of gaze events and page visits

The camera feed from WebGazer.js is processed entirely on your device. Only the resulting (x,y) gaze coordinate — not any image — is transmitted to our servers.

Data collection happens only during active task sessions that you explicitly start.

The sequence is:

1. You open the LessMissed extension popup
2. You click "Start task" on a specific brand task
3. The extension requests camera access (one-time browser prompt)
4. Tracking begins after you grant camera access and the task starts
5. Tracking ends when you click "Stop task", the task completes, or you close the tab

The extension does not run in the background. It does not track any browsing outside of active sessions. Camera access is released when the session ends.

Brands (clients) see aggregate, anonymized data only:

• Heatmaps showing gaze density across their pages
• Session replay animations (gaze dot on a page recording)
• Element-level fixation counts and attention rankings
• Confusion zones (areas of hesitation or re-scanning)

Brands never see: your name, email address, any personally identifiable information, or anything from sessions outside their own tasks.

LessMissed staff may access session data for quality assurance, fraud prevention, and product improvement purposes.

We do not sell, rent, or share your data with third parties for advertising or marketing.

You can stop data collection at any time by:

• Pausing a task: Click "Pause" in the extension popup. Camera and tracking stop immediately.
• Stopping a task: Click "Stop task". Session ends. Camera turns off.
• Uninstalling the extension: Removes the extension from your browser. No further data is collected.
• Deleting your account: Go to Profile → Settings → Delete account. All your data is purged from our servers within 30 days.

To request data deletion by email: privacy@lessmissed.com

Gaze session data is stored in MongoDB Atlas (encrypted at rest, AES-256). All data in transit uses TLS 1.3.

Data retention periods by plan:

• Starter: 7 days
• Growth: 90 days
• Enterprise: Unlimited (configurable)

Consumer account data (email, reward history) is retained as long as the account is active. Upon account deletion, all associated session data is purged within 30 days.

We use industry-standard security practices including access controls, audit logging, and regular security reviews.

We use the following third-party services to operate LessMissed:

• MongoDB Atlas — Database storage (encrypted)
• Vercel — Web hosting for lessmissed.com
• Google OAuth — Optional sign-in (if you use "Sign in with Google")

We do not use advertising networks, tracking pixels, or third-party analytics tools that share your data with advertisers.

We do not sell data to third parties.