Pendra Privacy Policy

Last updated: 2026-04-29

Pendra is a browser extension that reads your own Amazon order history, categorizes it for budgeting, and exports CSV files. This page describes exactly what data the extension touches, where it goes, and what we do (and don't do) with it.

What stays on your device

Everything we read from Amazon, and everything you see in the extension, is stored locally in your browser:

  • Your transactions — date, payment method, amount, order ID, item titles, prices — are saved in browser.storage.local. They never leave your computer.
  • Your Amazon account email and the friendly label you assign to it — saved in browser.storage.sync (which Chrome may sync across your own signed-in browsers). Never sent to Pendra's servers.
  • Your CSV exports — generated in-browser and saved to your Downloads folder. Never sent anywhere.

If you uninstall the extension, all of this data is removed automatically by your browser.

What goes to Pendra's backend

To turn raw Amazon page HTML into clean, categorized rows, the extension makes two kinds of calls to our Cloudflare Workers backend:

  • /extract — receives the markdown form of an Amazon transactions or order-details page (after we strip shipping addresses, recommendation widgets, and other non-essential content) and returns structured rows. The markdown is forwarded to Anthropic's Claude API to perform the extraction.
  • /classify — receives item titles (and optionally quantity and price) and returns a single category from a fixed taxonomy. The item titles are forwarded to Anthropic's Claude API.

We do not send to the backend:

  • Your Amazon account email
  • Your name, address, payment information, or any other personal identifier from your Amazon account
  • The full HTML of any page (only post-stripping markdown)
  • Any cookies, session tokens, or authentication credentials

What the backend stores

  • A shared classification cache, keyed by a SHA-256 hash of the item content. This lets users who buy the same products benefit from a previous classification (and lets us not pay Anthropic to re-classify "Wooden Hangers" 50 times). The cache contains item titles and the resulting category — no user identifier.
  • For high-confidence classifications only. Low-confidence (uncertain) results are not cached.

We do not log or store:

  • Your Amazon transaction data
  • Any IP address, user agent, or other request metadata for analytical purposes
  • Any cookies

Cloudflare and Anthropic each see your request as it passes through their services, subject to their own retention policies.

What Pendra does not do

  • We do not connect to your Amazon account. The extension reads pages that your own browser session has already loaded. We never see your Amazon password, credit cards, or any data Amazon doesn't render to the page.
  • We do not contain any analytics SDKs, ad networks, fingerprinting libraries, or third-party tracking scripts.
  • We do not sell, rent, or share data with anyone.

Future changes

A later version of Pendra will introduce optional user accounts (managed by Clerk) and paid subscriptions (billed by Stripe). When that lands, this page will be updated to describe what data those services see — at minimum, an email address you provide for sign-in, plus billing details for paid plans. The data-handling for transaction sync will not change.

Contact

Questions or concerns? Use the contact form.

Third-party processors

Two services touch data in transit, in addition to Cloudflare and Anthropic mentioned above:

  • Web3Forms processes contact-form submissions and relays them to our inbox. Web3Forms sees the contents of any message you send via the form on this site. We don't recommend including sensitive details (account numbers, passwords) in the message.