Privacy Policy

Effective date: November 2, 2026 · Last updated: November 2, 2026

Who we are

OneTap Save (the “extension”) and the website onetapsave.com are operated by Zhixiong Yuan, China (“we”, “us”). This policy explains what information we handle and why. Contact: [email protected].

Summary

The browser extension

• Web page content. When you open the extension on a page, it reads the media addresses and titles that page has already loaded so it can show you what can be saved. This happens on your computer and is not sent to us.
• Downloads. Files you choose to save are downloaded directly from the original website to your computer. We never receive or store them on our servers.
• Optional cloud upload. If you connect Google Drive or Dropbox in Settings, the extension can upload a copy of a file you already saved locally into a folder named “OneTap Save” in your own cloud account. OAuth tokens stay on this device; media files are not sent to our servers. Cloud connect may be limited while Google OAuth is still in Testing (listed test users only) and while Dropbox Production review awaits about 50 real authorized users; local saving always works.
• Local storage. Settings, your download history, resume data, your license key and any cloud OAuth tokens are stored in your browser’s local extension storage. You can clear them in the extension’s “Records and cache” page, by disconnecting cloud accounts, or by removing the extension.
• License check. When you activate a Pro license key, and about every 12 hours afterwards, the extension sends the license key (and a device label such as “OneTap Save · Chrome”) to our payment platform Waffo Pancake to confirm the license is valid. No other information is sent, and nothing is sent to us.
• Chrome identity. On Chrome and Edge, connecting Google Drive uses the browser’s identity API so Google can show its own consent screen. We do not receive your Google password.
• No analytics or advertising. The extension contains no analytics, tracking or advertising code and does not sell or share data.

The use of information received from Google APIs and Chrome APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements, and to Google’s API Services User Data Policy.

Availability note. Google Drive OAuth may remain in Testing (test users only) until Publish completes. Dropbox Production review typically needs about 50 real authorized users. Local downloads are unaffected.

Purchases

Orders are processed by Waffo Pancake, our reseller and Merchant of Record. Waffo Pancake collects your name, email address, billing address and payment details to process your order, calculate tax and prevent fraud, as described on Waffo Pancake’ website. We receive your email address, country, the product you bought and the order details, which we use to send your license key, provide support, handle refunds and recover lost keys. We never receive your full card details.

Emails and support

If you email us, we use your message and email address only to reply and help you. We do not send marketing emails unless you ask to receive them.

Website

This website is static and does not use cookies or analytics. Our hosting provider may keep standard server logs (such as IP address, browser type and the page requested) for security and reliability, for a limited time.

How long we keep data

We keep order and license records for as long as needed to provide your license and support and to meet legal, tax and accounting obligations, and then delete them. Support emails are kept for up to 24 months. Cloud tokens on your device last until you disconnect or remove the extension.

Your rights

Depending on where you live (for example under the GDPR in the EU/UK or the CCPA in California), you may have the right to access, correct, delete or export your personal data, and to object to or restrict its processing. To make a request, email [email protected]. You may also complain to your local data protection authority. We do not sell personal information.

Children

OneTap Save is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their personal data.

Changes

We may update this policy. We will post the new version on this page and change the date above. Material changes will be highlighted on the website.

Contact

Zhixiong Yuan · China · [email protected]