Bouncer Privacy Policy

Last updated: May 29, 2026

This Privacy Policy describes how General Welfare Systems, Inc., a Delaware corporation with its principal place of business in New York ("General Welfare," "we," "us," or "our"), collects, uses, and shares information in connection with the Bouncer website (bouncerhq.com) and browser extension (collectively, the "Service").

By installing or using Bouncer, you agree to this Privacy Policy. If you do not agree, please uninstall the extension and discontinue use of the Service.

Overview

Bouncer is a cybersecurity service that protects users from malicious businesses and financial scams online. We do not sell personal data. To use Bouncer you sign in with your email address, which creates an account that keeps your settings, reports, and feedback associated with you across your devices. Requests the extension makes to our servers are tied to your account.

To improve the Service, the extension also sends usage events tagged with a random, locally-generated install identifier and, while you are signed in, associated with your account.

If you have questions or concerns about this Policy or our privacy practices, or wish to exercise your data privacy rights, please contact us at legal@gw.inc.

Information We Collect

To provide the Service, the Bouncer extension transmits the following:

• Account information. To use Bouncer you sign in with your email address. We send a one-time code to that address to verify it, and we store your email address and basic account records so your settings, reports, and feedback stay associated with you across devices.
• Page addresses. When you visit a page, the extension transmits the page's web address so that we can compare it against the Bouncer risk index and warn you about known scam and phishing sites. On search results pages, this includes the web addresses of the links shown so we can flag risky results.
• Usage events. Events describing how you interact with the extension and its protections — for example, opening the popup, seeing or interacting with a warning, having a threat detected, or changing your settings. These events are tagged with a random install identifier generated locally by the extension and, while you are signed in, associated with your account.
• Information you provide directly. For example, when you email us for support, submit a report or feedback through the extension, or request a score appeal.

The extension is designed to skip localhost, IP-address, private, and internal-looking domains. Web addresses are sanitized before being used as lookup keys against the risk index (we strip query strings, fragments, and common URL noise). Requests to our servers are made over an encrypted connection and are tied to your account; standard network information, such as your IP address, may be processed by our infrastructure and security providers to deliver, secure, and rate-limit the Service.

Information We Do Not Collect

The extension is designed not to transmit:

• the content of the pages you visit, such as their readable text;
• values you type into form fields, including passwords and other entered text;
• cookies, browser local storage, or request headers from pages you visit;
• your name or other personal identifiers, beyond the email address you use to sign in and anything you choose to provide to us directly.

How We Use Data

We use the information described above to:

1. operate and provide the Service, including the risk index and warnings;
2. maintain, secure, and improve the Service and the models and signals that power it;
3. respond to your support requests, reports, and appeals; and
4. comply with applicable law.

We do not sell your personal data to third parties or data brokers.

How We Share Data

We never sell your data to advertisers or data brokers. We share limited data with trusted third-party service providers acting on our behalf as sub-processors, including for infrastructure hosting and content delivery, and network security and traffic proxying. These providers are bound by contract to use the information only as needed to deliver services on our behalf and are not authorized to use the information for their own purposes.

Geographic Restrictions

The Service is not offered to, and is not intended for use by, individuals located in the European Economic Area or otherwise covered by the EU GDPR, the United Kingdom, or Switzerland. If you are located in any of these regions please do not install or use the Service.

Children

The Services are only intended for individuals 18 years of age or older.

Security

We implement administrative, technical, and organizational safeguards designed to protect personal information. These may include encryption, access controls, security monitoring, vendor diligence, logging, incident response procedures, and workforce training. No system is completely secure, and we cannot guarantee absolute security.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or Services. If we make material changes, we will provide notice as required by law or as otherwise appropriate under the circumstances.

Privacy Rights

If you are a California resident, you have various rights under the CCPA. To exercise these rights, email legal@gw.inc and we will respond within the time period required by law. To verify your identity, we may ask you to confirm access to the email address associated with your Bouncer account.

If you reside in other US states or countries with similar laws or rights as California, you can exercise your rights using the process described above and we will respond as required by law.