Legal
Privacy policy
Last updated this month
This policy covers the data Samurai Bypasser handles when your checkout routes a payment through the extension. It is written to be read, not skimmed.
01. What this product is
Samurai Bypasser is a browser extension that runs inside the checkout you already open. It does not process payments itself, does not hold merchant funds, and does not replace the gateway as the payment processor.
Because of that, the data it handles is narrower than a processor's. This policy describes exactly what crosses the extension.
02. What the extension reads
Card number, expiry and CVV are read from the checkout fields the customer filled. They stay in the browser and are posted once to the relay endpoint you configure when a run settles.
We do not receive or store bank account numbers, government identifiers, or the contents of any document a customer might attach to a payment.
03. What we do process
When a checkout settles we record: the payment intent, the status, the charge id, the decline code if the attempt failed, the ACS vendor, the challenge step and result, the site and plan decoded from the checkout link, and the relay response.
We also record the switches you set, which are stored in extension storage and persist across a reload.
04. Retention
The last run and the rolling trace are kept in extension storage. Clear trace empties the history, and Reset tab state clears the per-tab state.
State persists across a tab close so the menu still shows the outcome after the checkout is gone.
05. Subprocessors
Chrome hosts the extension and its storage. The relay endpoint receives settled card POSTs. The checkout host renders the fields the extension reads. A delivery channel forwards posted runs when enabled.
Each subprocessor is bound by a data processing agreement. Only the relay endpoint receives card fields.
06. Your rights
You can request access to, correction of, or deletion of the data we hold about your account at any time using the privacy request form or by writing to [email protected].
Where you are acting for an end customer, you remain the controller of their data and we act as your processor. Requests from their customers should come through you.
07. Security
Access is limited to the relay endpoint you configure, transport is HTTPS, and removing the extension is non-destructive.
The full model, including the data flow, is on the security page.
Questions about this document: [email protected]. Samurai Bypasser is a trading name used for this product.