CreatorKit Chrome Extension — Privacy Policy

Last updated: 21 July 2026

This policy covers the CreatorKit Chrome extension only. It is separate from the privacy policy for the CreatorKit web app (creatorkitapp.com), which is published at a different URL and governs that product. The extension is used with a CreatorKit account; account registration, billing, and anything you do on our website are governed by the web app's policy. This page covers what the extension does in your browser.

CreatorKit ("the extension", "we", "us") is a Chrome extension for Amazon affiliate creators. This policy explains exactly what the extension does and does not do with your data. The short version: the extension works alongside your own logged-in Amazon session, in your browser. The data it sends to our service is limited to your CreatorKit account sign-in (email and password, once, to sign you in), Amazon product IDs (ASINs), and the IDs of Creator Connections campaigns you have accepted. It never sends your Amazon password, cookies, or tokens, and your Amazon earnings figures never leave your browser.

• Extension privacy policy (this page): https://www.creatorkitapp.com/privacy-ext
• Web app privacy policy: https://www.creatorkitapp.com/privacy

What CreatorKit does

CreatorKit runs on the Amazon Associates dashboard (https://affiliate-program.amazon.com) and, for one feature, on your own Amazon storefront page (https://www.amazon.com/shop/…). Signed in to your CreatorKit account, it:

• reads the list of your available Creator Connections / Sponsored Products offers from Amazon's own APIs, using your existing logged-in Amazon session, and lets you filter and sort them;
• lets you search a catalog of Creator Connections campaigns served by our own service;
• submits "accept" actions for the campaigns and offers you choose — individually or in bulk — to Amazon's own APIs;
• builds bulk-accept lists from sources you choose: your storefront's featured products, a CSV you upload or paste, or the products in your Amazon sales report;
• shows your 30-day Amazon earnings summary inside the panel (read from Amazon, displayed to you, never sent to us);
• helps you draft a social post for a product (caption + image), assembled in your browser; and
• shows badges on products that have an active Creator Connections campaign, and "Accepted" badges on campaigns you have already joined.

Your CreatorKit account

The extension is used with a CreatorKit account. When you sign in from the panel, your email address and password are sent over HTTPS to our own backend (app.creatorkitapp.com), which returns a sign-in token. The extension stores that token on your device and attaches it to its requests to our service — so those requests are tied to your CreatorKit account. Your password is never stored by the extension. Your subscription status is checked server-side to unlock the subscriber features. Signing out deletes the token from your device.

Your Amazon credentials are different — we never touch them. The extension does not ask for, read, store, or transmit your Amazon password, session cookies, or account tokens. Requests to Amazon are made by your browser using the session you already have, exactly as when you use the site yourself. To complete actions you initiate, it reads an anti-CSRF token from the Amazon page — used only for that request to Amazon, never stored or sent elsewhere.

Data we send to our service

Beyond signing you in, the extension sends the following to our backend — and only this:

• Amazon product IDs (ASINs) — to look up which products have an active Creator Connections campaign (the badges) and to resolve the campaigns available for a bulk-accept list. Depending on the source you choose, these ASINs may come from the affiliate page you're viewing, your storefront sync, a CSV you provide, or your sales report. Only the product IDs are sent — never prices paid, order details, sales amounts, or earnings figures.
• IDs of the campaigns you have accepted (with their end dates) — synced from Amazon's own campaign export and from accepts you make in the extension, and stored in our database linked to your account, so campaigns you've joined show as "Accepted" wherever you use CreatorKit.
• Your A+ Campaigns search filters (price range, commission range, category, and so on) — sent as query parameters so our service can return matching campaigns.
• IP address: as with any internet request, our server (hosted on Amazon Web Services) necessarily receives the connection's IP address. We use it only to operate the service and to rate-limit abuse, not to profile you.

Data that stays in your browser

Everything else the extension touches is read from Amazon and used locally, and is never sent to us:

• your offer lists, product details, prices, and discounts;
• your earnings summary and sales reports — read to display your 30-day earnings and to derive the list of products you sold (only those products' ASINs are then used, as described above; the figures themselves never leave your browser);
• your storefront contents (the products featured in your videos, photos, and idea lists), fetched from your own storefront page and cached on your device;
• your Amazon creator ID and store/tracking IDs, used to build links and requests to Amazon;
• Amazon's anti-CSRF and reporting tokens, used only for the requests you initiate to Amazon.

Data stored on your device

CreatorKit uses Chrome's local storage on your device to store: your CreatorKit sign-in token and a cached session status (your email and subscription state), your Amazon creator ID and storefront handle, a cache of campaign-badge results (with automatic expiry), the set of campaigns you've accepted through the extension, your last storefront-sync result, a cached earnings summary, the state of an in-progress bulk-accept run (so it can resume if you close the panel), and your UI preferences. A session-only flag remembers whether the panel was left open. You can clear all of it at any time by signing out and/or removing the extension.

Permissions

• affiliate-program.amazon.com — the panel runs there: it reads your offers, campaign results, and reports, and submits the accept actions you choose to Amazon's own APIs.
• www.amazon.com — limited to your own storefront: a banner appears only on www.amazon.com/shop/… when it's your storefront, and the storefront sync fetches your storefront's item list to build your bulk-accept product list.
• app.creatorkitapp.com — our own backend: sign-in, campaign lookups by ASIN, the A+ Campaigns catalog, and the accepted-campaigns sync, as described above.
• *.media-amazon.com — fetches a product image for the "Create Post" feature when you copy it; the image is processed in your browser and not sent to us.
• *.s3.amazonaws.com — Amazon delivers its own "download all campaigns" export as a file on Amazon S3; the extension downloads and reads that report in your browser to power the "Accepted" badges. Nothing else is fetched from this host.
• Storage — to save the items listed in "Data stored on your device".
• Scripting — to show the panel in the dashboard tab when you click the extension icon.

Third parties

CreatorKit does not use analytics, advertising, or tracking services inside the extension. We do not sell or share your data. Our backend is hosted on Amazon Web Services (AWS), which processes requests on our behalf as our infrastructure provider. Subscriptions are purchased and managed on our website — payment details are handled there, never in the extension, and are governed by the web app's privacy policy. The extension also contains links to our website (creatorkitapp.com); visiting those links is subject to that site's own policy.

Data retention and deletion

The data linked to your account (your email and the campaign IDs you've synced) is kept while your CreatorKit account exists. To delete your account and its data, contact us at the address below. Data stored on your device is removed when you remove the extension.

Relationship to Amazon

CreatorKit is an independent tool and is not affiliated with, endorsed by, or sponsored by Amazon. "Amazon" and related marks are trademarks of Amazon.com, Inc. or its affiliates.

Changes

We may update this policy; material changes will be reflected by the "Last updated" date above.

Contact

Questions about this policy: team@creatorkitapp.com