# Data Processing Documentation

Last Updated: February 23, 2026

This document provides technical information about how BirdTab processes data, intended for regulatory compliance and transparency.

## 1. Data Flow Overview

```
┌──────────────────────────────────────────────────────────────────────────────┐
│                              USER'S BROWSER                                  │
│  ┌────────────────────────────────────────────────────────────────────────┐  │
│  │                         BirdTab Extension                              │  │
│  │  ┌────────────┐ ┌────────────┐ ┌────────────┐ ┌────────────────────┐  │  │
│  │  │  Settings  │ │ Bird Data  │ │ Diagnostics│ │ License Key (Pro)  │  │  │
│  │  │  (Local)   │ │ (Fetched)  │ │ (Sentry)   │ │ (Local)            │  │  │
│  │  └─────┬──────┘ └─────┬──────┘ └─────┬──────┘ └────────┬───────────┘  │  │
│  └────────┼──────────────┼──────────────┼──────────────────┼──────────────┘  │
└───────────┼──────────────┼──────────────┼──────────────────┼─────────────────┘
            │              │              │                  │
            ▼              ▼              ▼                  ▼
   ┌──────────────┐ ┌──────────────┐ ┌──────────────┐ ┌──────────────┐
   │Browser Store │ │ BirdTab API  │ │ Sentry.io    │ │ LemonSqueezy │
   │ (Local/Sync) │ │ + Macaulay   │ │ (US Region)  │ │ (Payments)   │
   └──────────────┘ └──────────────┘ └──────────────┘ └──────────────┘
```

## 2. Local Storage Data

User preferences and cached data are stored locally in the browser using the Storage API. This includes region preference, audio settings, and cached bird data.

**Retention**: Until user clears data or uninstalls the extension.

## 3. External Services

### BirdTab API

A read-only API that provides bird species data based on your selected region. Only the region code is sent; no personal data is transmitted.

### Macaulay Library

Bird images and audio are fetched from Cornell Lab's Macaulay Library using species codes. No personal data is shared.

### LemonSqueezy (Payment Processing)

Pro subscription payments are processed by LemonSqueezy, which acts as the merchant of record:

- All payment, billing, and account data is managed by LemonSqueezy
- The extension sends only the license key to verify Pro status via the BirdTab API
- BirdTab does not receive, store, or process payment information or customer email addresses

**Not collected by BirdTab**: Payment details, email addresses, names, billing addresses — all handled exclusively by LemonSqueezy.

### Sentry.io (Error Tracking)

Anonymous error reports are sent to Sentry.io to help us identify and fix bugs. This includes:

- Error messages and stack traces
- Extension version and browser info
- Selected region (for debugging)

**Not collected**: IP addresses (anonymized), browsing history, personal identifiers, or any website content.

## 4. Data Retention

| Data Type         | Retention                         | Location               |
| ------------------| -------------------------------- | --------------------- |
| User settings     | Until uninstall                  | Your device           |
| Bird cache        | 7 days                           | Your device           |
| License key       | Until deactivation or uninstall  | Your device           |
| Error reports     | 30 days                          | Sentry.io (US)       |

## 5. Data Security

- All network requests use HTTPS/TLS
- Local data is encrypted by the browser
- No sensitive data is transmitted

## 6. Your Rights

- **Access**: View your data via browser DevTools
- **Deletion**: Uninstall the extension to remove all local data
- **Opt-out**: Disable the extension to stop all data collection

## 7. Compliance

BirdTab is designed with privacy in mind:

- **GDPR**: Minimal data collection, no personal data processing
- **CCPA**: No sale of personal information
- **Browser Web Store**: Compliant with developer policies

## 8. Contact

For data-related inquiries:

- **Email**: [support@birdtab.app](mailto:support@birdtab.app)

## Related Documents

- [Privacy Policy](/content/privacy/index.html)
- [Terms of Service](/content/terms/index.html)

This document is effective as of February 23, 2026.