You choose the listing to analyze.

Listing data

When you use the extension on a supported Zillow or Redfin listing, Home Passport captures the listing URL, page title, visible listing text, sanitized page HTML, viewport details, browser user agent, capture time, and provider hint.

The server uses this information to extract property facts and prepare the Home Review. Before transmission, the extension removes password fields and excludes live input, textarea, selected-option, and editable-page values. It does not collect unrelated form submissions or credentials.

Account data

If you sign in, Home Passport processes Google and Supabase account identifiers and profile information, including your user ID, name, and email when provided, to connect Home Reviews, My Journey, purchases, and account state to your account.

For authenticated Starter Pass and Explorer Pass access, the extension queries cookies only for https://home-passport.app and filters for the Supabase authentication-token cookie. It extracts the access token in memory and sends it only to Home Passport as a bearer authorization header.

The extension does not place the token in Chrome storage or application logs. Its permissions do not allow it to access Zillow, Redfin, or unrelated-domain cookies.

Data categories

Depending on how you use Home Passport, the service processes account identifiers and profile information; authentication information; the URL and domain of the listing you explicitly select; the property address or coordinates; request and review activity such as invocation, timing, identifiers, and status; and content from that selected listing page.

Hosting and security infrastructure also receives routine network metadata such as IP address, browser user agent, request time, and request status. Home Passport does not monitor, collect, or retain a history of unrelated websites.

How data is used

Listing and account data are used to provide Home Reviews, show remaining Home Reviews, support Sign In, and keep homes in My Journey when you choose to save them.

Home Passport does not sell this data and does not use it for advertising, creditworthiness, or lending decisions.

Aggregate traffic measurement

Home Passport uses Vercel Web Analytics for aggregate traffic measurement, such as understanding which pages are visited. It does not use third-party cookies.

Before an analytics URL is sent, Home Passport removes query strings and URL fragments and replaces sensitive dynamic values, including Home Review identifiers and shared-page tokens, with stable route labels. Analytics URLs do not include property addresses, email addresses, authentication or extension-completion tokens, or Stripe session, payment, or checkout identifiers.

Payments

Stripe processes payment-card and payment-method information through Stripe Checkout. The Chrome extension does not receive or store payment-card or bank-account details.

Home Passport receives and retains only the purchase details, transaction references, status, and entitlement information needed to activate paid access, show purchase history, reconcile transactions, and provide support.

Sharing and service providers

Data is transmitted over HTTPS to the Home Passport web application. Home Passport uses Supabase for authentication and application data, Vercel for hosting, Stripe for purchases when you choose to buy Explorer Pass, and Google for Google Sign In.

To prepare Land & Environment context, Home Passport may send the property address or coordinates to the U.S. Census Geocoder, OpenStreetMap Overpass services, U.S. Geological Survey services, FEMA's National Flood Hazard Layer, and NOAA climate services. These providers receive property-location information needed for the requested Home Review, not your Home Passport password or payment details.

Listing data is not sent to Zillow or Redfin by the extension.

Storage and retention

Chrome local storage contains homePassportAnonymousInstallId, a random anonymous installation identifier used to enforce guest Home Review limits across browser restarts. It remains until the extension or its stored data is removed.

Chrome session storage contains homePassportAuthAttempt:* sign-in return metadata for no more than 10 minutes, homePassportPendingReviewAttempt:* listing URL and idempotency metadata for no more than 30 minutes, and the homePassportRuntimeEnvironment runtime-environment marker. These records support Manifest V3 service-worker continuity and are removed when completed, expired, or no longer applicable.

Chrome storage does not contain authentication tokens, listing HTML or listing text, completed review results, account profiles, notes or checklists, analytics history, or payment information.

Home Reviews, account information, and My Journey data are retained server-side as needed to provide the service, maintain security and reliability, comply with legal obligations, and handle support. Authentication cookies remain subject to their configured session lifetime. Home Passport does not promise a fixed deletion deadline where one is not implemented.

Security and limited human access

Home Passport uses HTTPS in production, limits persistent extension host access to the Home Passport application, and uses temporary active-tab access only after you invoke the extension on a listing. Authorization decisions stay on the server, and structured application logs redact secrets and tokens.

People are not permitted to read extension-collected user data except with the user's specific consent for support, when needed for security or abuse investigation, to comply with law, or when data has been aggregated and anonymized for internal operations.

Your choices

You can choose not to use the extension on a listing, remove the extension from Chrome, Sign Out of Home Passport, or contact us to request deletion of account or Journey data.

Questions and deletion requests can be sent to homepassport.app@gmail.com.

Limited Use

Home Passport uses information received from extension permissions only to provide or improve the disclosed single purpose of creating structured Home Reviews from supported Zillow and Redfin property listing pages, including related security, reliability, and support purposes.

Home Passport's use of information received through the extension complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. The information is not sold; used for personalized, retargeted, or interest-based advertising; or used for creditworthiness or lending.

Transfers occur only when required to provide the service, protect security, comply with law, or complete an applicable corporate transaction subject to any consent required by policy or law. Human access remains limited to explicit user-authorized support, security or abuse investigation, legal compliance, or aggregated and anonymized internal operations.