1 Who This Applies To
This GDPR notice applies to all users of OG Outlier who are located in the European Union, European Economic Area (EEA), or United Kingdom.
OG Outlier (Independent Developer)
Website: ogoutlier.online
Contact: bhushanchhaya@gmail.com
2 Our GDPR Position β Minimal Data Controller
OG Outlier is designed from the ground up to collect as little data as possible. In GDPR terms we are a minimal data controller because:
- The extension processes Facebook feed data entirely locally on your device
- No personal data is transmitted to our servers
- No profiling or automated decision-making occurs
- The only external data transfer is anonymous license validation with Freemius
3 Legal Basis for Processing (Article 6 GDPR)
The limited data processing we perform is based on:
Contractual Necessity (Article 6.1.b)
- License key validation to provide Pro features you have purchased
- Anonymous device UUID to enforce single-device license terms you agreed to
Legitimate Interest (Article 6.1.f)
- Local storage of your preferences and settings to provide consistent extension functionality
4 What Personal Data We Process
We process minimal personal data:
Via Freemius (payment processor) only:
- Email address (for purchase receipts and license key delivery)
- Payment information (handled by Freemius/Stripe β we never see this)
- Country (for tax calculation only)
Locally on your device only (never on our servers):
- Anonymous device UUID (randomly generated, not linked to your identity)
- Extension preferences
We do NOT process:
- Your name
- Your Facebook account data
- Your browsing history
- Your location
- Any content from your Facebook feed
- Any behavioral or analytics data
5 Data Transfers Outside the EU
License validation data (anonymous UUID + license key) is processed by Freemius whose servers may be located outside the EU. Freemius is GDPR compliant and processes data under Standard Contractual Clauses (SCCs) as approved by the European Commission.
Freemius GDPR information: freemius.com/privacy
6 Data Retention
We retain data for the minimum period necessary:
- License data: retained while your subscription is active + 90 days after cancellation for support purposes
- Purchase records: retained for 7 years as required by financial regulations (held by Freemius)
- Local extension data: retained until you clear it via Settings β Clear All Data or uninstall the extension
You can request immediate deletion at any time (see Your Rights below).
7 Your Rights Under GDPR
As an EU/EEA user you have the following rights:
Request a copy of all personal data we hold about you. We will respond within 30 days.
Request correction of inaccurate personal data.
Request deletion of all your personal data. For local data: popup β Settings β Clear All Data. For Freemius data: we will submit deletion request to Freemius on your behalf within 72 hours.
Request that we restrict processing of your data in certain circumstances.
Request your data in a machine-readable format. Use popup β Settings β Export Debug Log for locally stored data.
Object to processing based on legitimate interests.
OG Outlier does not use automated decision-making or profiling as defined under Article 22 GDPR.
8 How to Exercise Your Rights
To exercise any GDPR right, contact us at:
Subject line: "GDPR Request β [Your Right]"
Example: "GDPR Request β Right to Erasure"
We will:
- Acknowledge your request within 72 hours
- Respond fully within 30 days
- Never charge a fee for GDPR requests
- Never require unnecessary identification beyond your purchase email address
10 Data Breach Notification
In the unlikely event of a data breach affecting EU users we will:
- Notify relevant supervisory authorities within 72 hours of becoming aware (Article 33 GDPR)
- Notify affected users without undue delay if the breach is likely to result in high risk to their rights and freedoms (Article 34 GDPR)
- Publish a notice on ogoutlier.online
11 Supervisory Authority
If you are unsatisfied with our response to your GDPR request, you have the right to lodge a complaint with your local supervisory authority:
- EU users: your national data protection authority
- UK users: Information Commissioner's Office (ICO) β ico.org.uk
We would however appreciate the opportunity to address your concerns directly before you contact a supervisory authority.
12 Children's Data
OG Outlier is not directed at children under 16. We do not knowingly process personal data of children. If you believe a child has provided personal data, please contact bhushanchhaya@gmail.com immediately.
13 Changes to This Notice
We will update this page if our data practices change. Significant changes affecting EU users will be communicated via:
- Chrome Web Store update notes
- Email notification via Freemius (if applicable)
- Notice on ogoutlier.online
14 Contact & Data Controller Details
Website: ogoutlier.online
Email: bhushanchhaya@gmail.com
Response time: within 72 hours for GDPR requests