Privacy Policy
Version of 17 September 2026. Data controller: Punchmark project (independent developer). Contact for data requests: info@suerte.cloud.
1. What the extension does
Punchmark is a browser extension that determines, on the player’s side, whether a game on a gaming site is the genuine build from the claimed provider and which RTP configuration it declares. The extension only observes the network activity of the game frame; it never modifies or blocks traffic.
2. What data is processed
On your device: the extension observes the game frame — request domains and their structure (JSON keys without values; URL parameter values replaced with null except game/language/currency identifiers), hashes of game files, perceptual hashes of images and the declared RTP — and shows a preliminary status from the list of provider domains. The last 200 checks are kept in your browser.
We never collect: bet and win amounts, balances, session tokens, cookies, logins or account identifiers on the gaming site, or the content of private messages.
Sent to our server (with every check): the observation described above — the game frame address with parameter values removed, request domains, hashes of game files and perceptual hashes of images, the declared RTP — plus an anonymous installation identifier (a random string rotated every 30 days), the extension version and a salted hash of the IP address (the IP itself is not stored). The comparison against reference builds happens on the server, which is what produces the final verdict you see, and the same observations grow the database of reference builds and provider mirrors.
Account (only if you create one): e-mail address, consent date, confirmation and activity dates, number of installations. The e-mail is linked only to the anonymous installation identifier and never to your account on a gaming site.
3. Why
- To show you the check result (locally).
- To re-evaluate verdicts with current rules and grow the reference and mirror database from submitted observations.
- To unlock the full report and send result e-mails (with an account). The basic check works without an account and without time limits.
Legal basis: our legitimate interest in operating the service (sending check results) and your consent (the checkbox at sign-up). You can stop sending by removing the extension, and delete the account with the button in Settings.
4. Who receives the data
Data is processed on servers of the hosting provider Railway (Railway Corp., USA; region: US West). E-mails are sent through Brevo (Sendinblue SAS, France), which receives your address and the message content. Data is not sold and not shared with advertising networks.
5. Retention
- Observations without an account — up to 12 months, then aggregated.
- Account — until you delete it or after 24 months of inactivity.
- Sign-in links — 30 minutes.
6. Your rights
You can delete the account with the “Delete account” button in Settings (the e-mail is erased, the license revoked), or request a copy or deletion of your data by e-mail at info@suerte.cloud. Users in the EU/EEA have the rights under the GDPR, including the right to lodge a complaint with a supervisory authority.
7. Extension permissions
webRequest, <all_urls> — games are served from thousands of provider and aggregator domains that cannot be listed in advance; the extension observes traffic only inside the detected game frame. storage — local log and settings. alarms — periodic rule updates. tabs — the status dot on the icon for the active tab and state reset when the tab moves to another game.
8. Changes
The current version is published at https://punchmark.online/privacy. We will notify you in the extension about material changes.