1. Data controller
Yuxuan Wang operates Magny Search as an individual in mainland China, People’s Republic of China, and is the personal information controller. Magny Search is a product and trading name, not a separate company.
Contact support@magnysearch.com for support, privacy requests or security reports. The operator handles these requests directly and normally acknowledges them within 2 business days. Support hours are Monday–Friday, 09:00–18:00 China Standard Time (UTC+8), excluding public holidays. No separate data protection officer is appointed.
2. Personal information we process
On your device: page matching and OCR recognition process page text, images and video frames locally. The extension can store settings, authorized scopes, search preferences, aliases, caches and page text you choose to save. API keys and service credentials use restricted extension session storage, or extension-only IndexedDB when you choose to remember them. They are excluded from settings exports and browser sync.
Accounts and transactions: optional membership uses Auth0-hosted sign-in, with Google or email as configured. The identity provider handles sign-in details. Our membership service stores identity references, internal account identifiers, entitlements, billing periods, usage reservations, accounting records, order details and payment status. Support handles communications you send. We do not directly store login passwords or full payment card numbers.
Network and task data: your chosen search engine receives search terms and, for site search, the target domain. Page and PDF previews contact the source website, which can receive ordinary request information such as your IP address. After cloud consent, AI receives the query and necessary passages, OCR text, selected tab or bookmark titles and domains, links or PDF excerpts for the task. Private pages require additional confirmation under extension rules; not every task sends every category.
Operational records: the membership service records request identifiers, timestamps, status, usage and content-derived HMACs for duplicate control. The usage ledger does not store full page text. Website hosting and connected services may process IP addresses, browser or network information, access logs and errors. Routine logs under our control follow section 7; independent providers’ logs follow their own policies.
3. Purposes and legal bases
We process necessary information to provide requested search and AI tasks, accounts, entitlements, usage accounting, payment assistance, support and security, and to meet legal obligations. Where a legal basis must be specified, requested services rely on contractual necessity, necessary security and maintenance on applicable legitimate interests, and required retention or disclosure on legal obligations.
Optional cloud text processing requires authorization in the extension. Where the law requires consent, we rely on valid consent and stop corresponding future processing on withdrawal. Browser permissions do not authorize advertising or unrelated use. We do not use personal information for solely automated decisions producing legal or similarly significant effects.
4. Cookies, storage and tracking
This website loads no analytics scripts, advertising trackers or third-party fonts. The extension uses browser storage for settings and feature data. Auth0 sign-in and Waffo Pancake hosted checkout may use cookies or sessions necessary for their services, under their respective policies.
Manage cookies in your browser and clear feature data in extension settings. Blocking storage needed for sign-in or checkout may prevent those features from working. Before introducing non-essential analytics or marketing technologies, we will update this disclosure and provide consent and withdrawal controls where required.
5. Sharing and service providers
We do not sell personal information or use page content for advertising or share it for cross-context behavioral advertising. Depending on enabled features, recipients may include Auth0 for sign-in, Waffo Pancake for payments and subscriptions, configured AI services and model providers, selected search engines, preview source websites and hosting providers. Alibaba Cloud Model Studio is currently supported; personal keys or self-hosted compatible services change the recipient.
Payments use Waffo Pancake hosted checkout. Full card numbers and security codes are handled by the payment service and its payment partners and are not stored on our servers. We receive status records needed to reconcile orders, billing periods, payments, cancellations and refunds. The current integration is test-only.
Necessary information may also be disclosed for lawful regulatory or judicial requests, to protect security and legal rights, with your consent, or during a business transfer with appropriate safeguards. Independent services process information under their own policies. Data received through Google APIs is handled in accordance with the Chrome Web Store User Data Policy, including Limited Use requirements.
6. Security and incidents
Measures include restricted extension credential storage, membership access-token verification, least-privilege database access and payment webhook signature verification. Public services use HTTPS/TLS. Connect only to services you trust and protect account and API credentials.
No system is completely secure. We investigate, contain and remediate personal information incidents promptly and notify affected people and authorities as required by laws applicable to the incident. Report concerns to support@magnysearch.com without sending passwords, API keys or full payment card information.
7. Retention and deletion
Local settings, saved page text and credentials are cleared by feature controls or your own deletion. Uninstalling usually removes extension storage but does not cancel subscriptions or delete third-party accounts or server records. AI tasks use necessary text during processing; the usage ledger does not store full page text. AI results may be temporarily cached in process memory for request replay. The default replay-validity window is 15 minutes; memory is released on capacity eviction or process termination. Expiry of replay validity does not itself mean immediate erasure of every memory copy.
Account data under our control remains while the account is active. We generally complete verified closure or deletion requests within 30 calendar days, deleting or unlinking sign-in identity references no longer needed. Records required for legal compliance, security or disputes are exceptions. Canceling renewal, signing out and closing an account are separate actions.
Necessary order, payment, entitlement and usage accounting records are retained for 7 years after the relevant transaction or billing period ends. Support communications are retained for 2 years after closure of the issue. Routine access, error and security logs under our control are retained for no more than 90 days, and backups rotate within 30 days. Expired records are deleted or anonymized through manual maintenance or controlled cleanup. Longer retention is limited to applicable legal requirements or unresolved disputes, with other uses restricted.
Verified deletion requests are reapplied after a backup restoration. Auth0, Waffo and your independently selected AI or other services retain their own records under their policies. We assist with service-related requests but do not promise to erase records that another provider must independently retain.
8. Your rights and controls
Contact support@magnysearch.com to request information about processing, access or copies, correction, deletion, restriction, available machine-readable export, objection or withdrawal of consent. Rights under applicable US state or other laws, authorized-agent requests and appeals remain available. We do not discriminate for lawful exercise of privacy rights.
We normally acknowledge requests within 2 business days and respond or complete them within 30 calendar days of receipt, with necessary identity verification, subject to any shorter statutory period. Where an extension is legally permitted, we explain the reason and expected date within the original deadline. Verification must be proportionate; we do not require passwords or full card numbers. If a request is denied, appeal by replying to the same address; we explain the appeal outcome within 30 calendar days and identify applicable regulatory complaint routes.
Extension controls let you disable automatic AI, withdraw cloud consent or scopes, delete saved text and credentials, sign out and revoke browser permissions. Withdrawal does not affect earlier lawful processing or recall information already received by a provider. We do not sell personal information, share it for cross-context behavioral advertising or conduct advertising tracking.
9. Marketing and unsubscribe
No marketing subscription is currently configured. If marketing messages are introduced, we will obtain consent where required and provide an email unsubscribe or contact-based opt-out. Necessary billing, security, account and material policy notices are handled separately from marketing communications.
10. International processing
The website is hosted on Cloudflare Pages and delivered over HTTPS through Cloudflare’s global network. Cloudflare may process IP addresses, requested URLs, browser/request information and security events to deliver and protect the site; its privacy policy applies to its own processing. Website analytics and advertising tracking are not enabled. The individual operator works from mainland China and may access necessary support and service information there. The current Auth0 tenant is in the United States. Managed membership AI permits US, Singapore or Germany endpoints; personal-key connections may also use mainland China or another provider you select. The membership database remains a local development deployment and production paid membership is not open. Serving US users does not mean all information is stored only in the US. Material changes to recipients, regions or purposes will be disclosed with any legally required consent or safeguards.
11. Age requirements
The service is intended for people aged 18 or over who can enter a contract. It is not directed to anyone under 18, and we do not knowingly collect their personal information. If such information is identified, we will verify and delete it or take other steps required by applicable law. Guardians can contact support@magnysearch.com.
12. Third-party links and policies
Search results, source websites, AI services, sign-in and hosted checkout have their own data rules. This policy covers Magny Search’s processing and does not replace their policies. Review the relevant provider policies, especially when configuring your own AI service.
13. Policy changes
We update the version and date on this page. Material changes are generally announced at least 30 days in advance through the website, extension or an available registered email, except for legal or urgent security needs. Where new consent is required, we obtain it rather than treating continued use alone as consent.
14. Contact us
Operator and controller: Yuxuan Wang. Trading name: Magny Search. Operating location: mainland China, People’s Republic of China. Support, privacy, appeals and security reports: support@magnysearch.com. Hours: Monday–Friday, 09:00–18:00 UTC+8, excluding public holidays.
Explain your relationship to the service, request type and necessary account or transaction identifiers. Do not email full identity-document copies, card numbers, security codes, passwords or API keys. If additional verification is necessary, we explain the minimum information and appropriate method.