This Privacy Policy explains how inamo Extension (“Extension”, “we”, “our”, or “us”) collects, uses, processes, and discloses information when a user participates in user experience (UX) research sessions.

By installing or using the inamo Extension, you agree to this Privacy Policy.

1. What This Extension Does

The inamo Extension is a browser extension designed for user experience (UX) research sessions. It allows researchers to collect interaction data from study participants who have explicitly agreed to participate. The Extension operates entirely on a session-activated, consent-first basis: no data is collected passively or in the background. The Extension records interactions like clicks, scrolling, navigation, and time on pages to provide insights into user behavior, with all data collected securely, anonymized when possible, and used only for intended research purposes.

2. What Personal Data We Collect and for What Purpose

When you activate a research session, this extension may collect:

  • Eye gaze coordinates captured via your device’s webcam using MediaPipe technology, these coordinates track where on the screen your attention is focused during the session. This helps researchers understand visual attention patterns and user focus.
  • Click coordinates X, Y position on the page where you clicked, allowing analysis of interaction patterns and feature engagement.
  • Mouse movement coordinates X, Y position as you move your cursor, providing insights into navigation behavior and user decision-making processes.
  • Screenshots of the web pages you interact with during the session
  • Timestamps of all recorded interactions, helping researchers correlate user actions with specific tasks, events, or page elements.
  • Viewport dimensions, your browser window size, which allows researchers to optimize design layouts for different screen sizes.
  • User agent information (browser type and version)
  • Session metadata, participation ID, task ID, test ID, which is used to organize and track data for research sessions without directly identifying individual users.

All data collected is handled in accordance with user consent and privacy standards and is used solely for intended research and usability analysis.

3. When Data Collection Occurs

Important: The inamo Extension does not collect any data passively or automatically. No information is recorded unless you have provided explicit consent and participated in the intended research session.

Data collection only occurs when:

  1. You receive a unique URL with session parameters from a researcher
  2. You explicitly click the “START TASK” or similar activation button
  3. Data collection continues only while a research session is running and stops immediately when the session ends.

You have full control over the data collection process and may withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal, by performing one of the following actions:

  • Clicking “STOP” or “FINISH TASK”

Closing the browser tab where the research session is active.

4. How We Use Your Data

  • All data collected during a session is sent only to the backend server URL specified and configured by the researcher conducting the study. The Extension does not share your data with any third parties outside of this designated research environment.
  • The information collected is used solely for user experience (UX) research analysis, helping researchers understand interaction patterns, evaluate usability, and improve digital products. Data is never repurposed for advertising, marketing, or other unrelated activities.
  • During a research session, session data is temporarily stored in your browser using chrome.storage.local, which allows the Extension to manage ongoing interactions and ensure accurate data capture.
  • After successful submission, local data is cleared from your device.

5. Data Sharing

The inamo Extension strives to ensure your privacy, and your data is handled with strict confidentiality. Specifically:

  • Your data is shared only with the researcher or organization that is conducting the specific UX research study you are participating in. No other external parties have access to your information.
  • We do not sell, rent, or otherwise share your data with any third parties for commercial purposes.
  • The data collected through the Extension is never used for advertising, marketing, promotional activities, or targeted campaigns. Our sole purpose is research and usability analysis.

Data collection occurs only during active research sessions when you have explicitly consented. The Extension does not collect any information outside of these sessions.

6. Your Control and Rights

The inamo Extension is designed to give you full control over your participation in UX research sessions and the data that is collected:

  • You have complete control over when data collection begins and ends. The Extension only starts recording information when you explicitly activate a research session, and you can stop it at any time using the “STOP” or “FINISH TASK” buttons.
  • You are free to cancel or exit a research session at any point. Closing the browser tab or clicking the session termination controls immediately stops all data collection.
  • You can request deletion of your data by contacting the researcher

The Extension functions only when you deliberately activate it. No passive or background data collection occurs, ensuring that your activities are private when you are not participating in a study.

  • Once the session ends or consent is withdrawn by you, no further data is collected, and any subsequent processing is carried out only in accordance with applicable data protection laws, including the General Data Protection Regulation and applicable Swedish data protection laws.

7. Data Storage and Security

  • During an active research session, your session’s data is stored temporarily on your device using secure local storage mechanisms. This allows the Extension to track interactions accurately and manage the session efficiently.
  • Once a session is completed or data is ready for submission, it is transmitted securely to the backend server specified by the researcher. This ensures that your information is protected during transfer and cannot be intercepted by unauthorized parties.
  • The Extension itself does not retain any copies of your session data after successful submission. Once data has been transmitted to the researcher, it is cleared from your device immediately to maintain privacy.
  • After submission, the responsibility for securely storing, processing, and protecting your data rests with the researcher or organization conducting the study. The Extension does not access or manage your data beyond the transmission process.

8. Data Collection, Usage and Device Permission & Storage

The inamo Extension may request your consent for certain browser permissions and limited device access, for the purpose of enabling your participation in research sessions. These permissions are used solely within the scope of a session that you choose to take part in and are not used for any activity outside such sessions.

This extension requires the following permissions:

  • storage – This permission allows the Extension to save session state and backend configuration locally on your device. It ensures that your interactions are accurately tracked during a session and that session parameters provided by the researcher are maintained.
  • activeTab – This permission enables the Extension to detect when you are on a research session page. It ensures that data collection only occurs when you are actively participating in a study.
  • tabs – This permission allows the Extension to capture screenshots of web pages during research sessions. Screenshots are used to provide researchers with visual context for your interactions.
  • scripting – This permission is necessary to inject the eye-tracking functionality into the browser page during a session. It enables the Extension to track gaze coordinates using your device’s webcam for UX research purposes.
  • <all_urls> – This permission allows the Extension to operate on any website where the research session takes place. It is not used to collect data from websites outside the scope of an active session.

Important Note: These permissions are required solely for the Extension to perform its research tasks during sessions you explicitly participate in. No data is collected from your browsing activity outside of these sessions.

9. Webcam Access and Eye-Tracking Functionality

For sessions that include eye-tracking features, the Extension will access your device’s webcam as follows:

  • The Extension requests access to your webcam only when you start a research session. No webcam access occurs outside of sessions, ensuring that your privacy is maintained during normal browsing.
  • Eye-tracking data is processed entirely on your device using MediaPipe technology. The Extension analyzes your gaze in real-time to estimate where you are looking on the screen.
  • The Extension does not record, store, or transmit any raw video from your webcam. At no point is your webcam footage shared with the researcher or any third party.
  • Only the calculated gaze coordinates (X and Y positions on the screen) are sent to the researcher’s backend for analysis. These coordinates provide insight into visual attention without compromising your personal video data.

This approach ensures that insights into visual attention are generated without collecting or sharing raw video or sensitive biometric data.

10. Children’s Privacy

The inamo Extension is intended only for users who are 18 years of age or older. We do not target or market the Extension to children, and it is designed for adult of 18 years or above age participation in UX research sessions.

We do not knowingly collect or process personal information from individuals who are under 18. Access to research sessions is based on the assumption that users meet the minimum age requirement and provide valid consent. If inamo becomes aware that personal information has been inadvertently collected data from a user who is under 18 years of age, we will take prompt steps to delete that data and, where necessary, restrict or terminate the access from our systems. Participation in research sessions is therefore restricted to adults, and any use by minors is unauthorized. If you believe that a child’s personal data has been collected through the Extension without appropriate consent, please contact us immediately at privacy@inamo.ai.

These measures are implemented to ensure compliance with applicable laws including regarding children’s privacy and General Data Protection Laws (GDPR) and protect young aged users from unintended data collection and processing.

11. Changes to This Policy

The inamo Extension may update this Privacy Policy from time to time to reflect changes in our practices, applicable legal requirements, or improvements to the Extension. We will notify users of material changes by updating the effective date at the bottom of this Policy and, where appropriate, by providing additional notice within the Extension or via email. We encourage you to review this Policy periodically. Your continued use of the Extension following notification of changes constitutes your acceptance of the updated Policy, subject always to your rights under applicable law.

12. Contact Information

You can use the above contact methods for any questions, concerns, or requests regarding this Privacy Policy or your data collection or processing.

13. Data Subject Rights (GDPR & Other Laws)

Depending on your jurisdiction, you may have several rights regarding the personal data collected through the inamo Extension. These rights are intended to give you control over how your personal data is used and to ensure transparency in its processing:

  • You have the right to request access to and copies of any personal data collected about you during research sessions. This allows you to understand exactly what information has been gathered and verify its accuracy.
  • You can request that any inaccurate or incomplete personal data be corrected or updated. This ensures that the data held about you is accurate and complete.
  • You may request the deletion of your personal data under applicable conditions. This includes any information collected during a session that you no longer wish to be stored or processed by the researcher.
  • You have the right to request processing of your personal data be limited in certain situations, such as when you contest the accuracy of the data or object to its use.
  • You have a right to request data portability, that means your personal data be transferred to another organization or provided to you in a structured, commonly used, and machine-readable format. This allows you to move your data between services if needed.
  • You have the right to object to certain types of data processing, including research-related analysis or profiling, if you believe it infringes on your privacy or personal interests.
  • If you are a California resident, you have the right to request that your personal data not be sold to third parties.

To exercise any of these rights, you should primarily contact the researcher or organization conducting the study, as they act as the data controller for the research activity. inamo may assist in facilitating such requests where applicable. All requests will be handled without undue delay and typically within one month, in accordance with applicable laws. For users located outside the European Economic Area (EEA), applicable local data protection laws will also be considered.

Legal Basis for Processing in the European Economic Area (EEA)

If you are located in the EEA, the processing of your personal data through the inamo Extension is based on one or more of the following legal grounds under the General Data Protection Regulation:

  • Consent: You have provided explicitly, informed consent to participate in the research session.
  • Contract Performance: Processing is necessary to enable your participation in the research session and fulfill the required research arrangement between you and the researcher or organization conducting the study.

Certain features of the Extension may also fall within the scope of the EU Artificial Intelligence Act (Regulation (EU) 2024/1689) (“EU AI Act”). Where applicable, this Policy reflects the transparency and accountability obligations imposed by EU AI Regulation.

Your personal data is retained only for as long as necessary to fulfill the purpose of the research session, including analysis, reporting, and contractual obligations. Retention periods are determined based on the nature of the data, the purpose of processing, applicable legal requirements, and the need to resolve disputes or enforce agreements. Where possible, data may be anonymized for longer-term analytical use.

14. Conclusion

By using the inamo Extension, you acknowledge that you have read, understood, and agreed to this Privacy Policy. Your participation in such research activity conducted is voluntary, and you retain full control over your data at all times including withdrawal of your consent. We are committed to protecting your personal information and privacy by ensuring that your data is collected, processed, and stored lawfully, fairly, responsibly and transparently, and is handled securely only for specified legitimate purposes, in accordance with applicable laws and regulations If you have any questions or concerns regarding this Privacy Policy or wish to exercise your rights regarding the processing of your personal data, you may please contact the researcher who invited you or reach out to us directly through the contact details provided herein.

Last modified [April 09th 2026].