Privacy policy
Effective 2026-11-08.
Vexit is a browser extension for Vevox live sessions, plus a website and a license check. They handle data differently, so each has its own section. The short version: the extension keeps everything on your device and has no tracking.
The extension
Your poll rules, saved phrases, settings and activity log are stored in your browser's extension storage, on your device. They are not sent anywhere. There is no telemetry and no analytics in the extension. Your chat messages, poll questions and answers, and logs never leave your device.
The extension runs only on vevox.app. On that page it reads the poll or chat and presses the buttons you would press, from your own account, after the countdown. Vevox sees what you submit the way it sees anything you submit yourself. Vevox's own privacy policy covers that.
The extension has an optional session recorder for troubleshooting. It is off by default. If you turn it on, the recording stays in extension storage on your device and you can delete it. Nothing is uploaded.
Uninstalling the browser extension removes its stored data from your browser. The userscript build (for Tampermonkey and similar) keeps its data in the userscript manager's storage until you remove it there.
The only network call the extension makes, besides talking to the Vevox page you are on, is the license check below, and that starts at paid launch. During the beta the extension makes none. If a later feature needs the network, this policy will say what it sends before that feature ships.
The license check
The license check is not active during the free beta, and the extension contacts no server. It switches on with the paid-launch update. From then, the extension contacts the Vexit license server, which runs on Cloudflare. It sends one of two things and nothing else:
- your license key, to check that it is valid; or
- a SHA-256 hash of your normalized email address, to start the one free 7-day trial. A hash is a fixed-length scramble of the address. The server can tell whether it has seen the same hash before, which is how it limits the trial to one per email. It cannot turn the hash back into your address.
No chat, poll, settings, log or usage data is sent. The license server does not receive your Vevox account, your course or the content of any session.
The email is hashed on your device, so the license server never sees the plain address. The extension calls the server only to check a license key (when you activate it, and from time to time while a key is set) and once to start the free trial. If the server is down, the extension keeps working from the last answer it saved on your device.
What the license server stores:
- Trial record. One row per email: the email hash scrambled again with a secret only the server holds (so a leaked copy could not be checked against guessed addresses), and the time the trial started. Nothing else. It is kept for as long as the service runs, so that one email cannot start a second trial.
- License key check record. A SHA-256 hash of your license key (not the key itself), the last result (active, expired or invalid), the plan name, the expiry date, the time of the check, and a flag that records whether the key was ever valid. A result is reused for 1 hour (60 seconds if the key was invalid) so the server does not ask Polar every time. Records stay so that a lapsed subscription can be reported as expired. Records for invalid keys are deleted after about a day.
The server does not store your name, email address or billing address, your plain license key, or your IP address or browser details. Its logs hold only error codes and HTTP statuses, never keys, hashes, IP addresses or request contents. Cloudflare, which runs the server, handles ordinary request details such as your IP address as network infrastructure, under its own policy, and uses the IP address only as a short-lived rate-limit counter. The server rejects requests that carry any other fields.
To check a key, the server passes the key and Vexit's Polar organization id to Polar's license-key validation, and nothing else. Polar is the payment processor and merchant of record. Its answer can include your customer details, and the server reads only the plan and the expiry date from it, and keeps only valid or not, the plan and the expiry date. It never returns, stores or logs your email, name, address or Polar customer id, either to Vexit or to the extension. Polar collects and holds your billing details, such as your name, email address, billing address and payment details, under its own privacy policy.
To delete a trial record or a key check record, write to support@getvexit.com with the email address or the license key concerned.
The website
Email list
If you sign up for the founding price or launch updates, the site stores your email address in Cloudflare D1, a database. Alongside it are a referral code, the placement tag of the flyer or link you came from (if any), who referred you (if anyone), when you signed up and confirmed, when we last emailed you and how many emails we have sent you, whether and when you unsubscribed, a private token used in your email links, and your founding slot number if you earn one. Visiting the site without signing up adds nothing to this list.
The list is used only for the founding-price and launch emails and beta updates. Every email has a one-click unsubscribe link, and the unsubscribe page works without logging in. Unsubscribing stops all emails to that address. The row stays until the retention deletion below or an erasure request.
- Retention. Signups that have not turned into a purchase are deleted 12 months after paid launch.
- Deleted rows can be restored for a while. D1 Time Travel keeps the database restorable for about 30 days, so a deleted row can still exist in that history for up to about 30 days.
- Erasure. Ask at support@getvexit.com and your email and identifiers are removed or replaced. If you hold a founding slot or referred other people, the row stays with placeholder values so slot numbers and referral counts stay correct, and it can no longer be linked to you.
- Confirmation emails are sent through Resend, an email delivery service. Resend retains the messages it sends, including their content, under its own policy.
- Hosting. The site runs on Cloudflare, which sees requests such as IP addresses as any web host does, under its own policy. The site does not store IP addresses in the email list.
Placement and referral tags
A ?f= placement tag or ?ref= referral code in a link is kept in your browser's session storage (keys vexit.f and vexit.ref) for that visit and written to the list only if you submit the signup form. It is not a cookie, and it is cleared when you close the tab.
Analytics and advertising measurement (website only)
With your permission, this website uses Google Analytics 4 (Google), the Meta Pixel (Meta) and the TikTok Pixel (TikTok) to understand which flyers, links and ads bring people to the site and to measure advertising. These tools are off by default. Nothing from them loads, and no cookie is set, until you press Accept on the banner. If you press Decline, or ignore the banner, they never load.
If they are switched on, they receive your page views with your IP address and browser details, and they set cookies on your device: Google sets _ga and _ga_<id>, Meta sets _fbp (and _fbc if you arrived from a Meta ad), and TikTok sets _ttp. Each provider acts for its own purposes under its own privacy policy. Only the standard page view is sent to them. Your email address, your confirmation or status links and your referral code are never sent to them, and the email confirmation, status and unsubscribe pages load none of these tools.
Your choice is stored on your device, in your browser's local storage (key vexit.consent), so you are not asked on every visit. You are asked again after 12 months. To withdraw consent at any time, use the Cookie settings button in the footer of any page and choose Decline: the tools stop, and the cookies listed above are deleted from this site. You can also clear your browser's site data.
The Vexit browser extension contains no analytics or telemetry.
Who runs Vexit
Vexit is run by an individual developer in New York, United States. For anything about your data, write to support@getvexit.com.
Vexit is not affiliated with or endorsed by Vevox.
Your choices and rights
You can unsubscribe from emails at any time, ask what the email list holds about you, ask for a correction, or ask for erasure. Write to support@getvexit.com from the address concerned and you will get an answer within 30 days. If you are in the EU or UK, these are also your rights under data protection law, and you can withdraw analytics consent at any time and complain to your data protection authority. The email list is kept because you asked to join it, and analytics run only with your consent. Personal data is not sold.
Children
Vexit is not directed at children under 13, and it does not knowingly collect personal information from them. If you think a child has given an email address to the list, write to support@getvexit.com and it will be deleted.
Changes
If this policy changes in a way that matters, the new version goes on this page with a new effective date. The extension's store listings link here. A change to what the extension sends off your device is published here before the extension does it, never after.