HMS Halal Lens Privacy Policy

HMS Halal Lens is provided by Halal Monitoring Services (HMS). This policy describes how the Firefox extension handles information.

Certification checks
The extension downloads the public HMS certification catalog and matches business listings locally in your browser. Routine matching does not send your searches, visited-page URLs, or business listing details to HMS. Catalog and configuration requests transmit extension information and ordinary network metadata, such as your IP address.
The extension may retrieve a supported website’s public business details using your existing website session. Provider cookies and retrieved page contents are not forwarded to HMS.

Optional features
- HMS account and favorites: Signing in sends your email and password securely to HMS. Your password is not saved by the extension. Account details and session tokens are stored locally to keep you signed in. Favorites and notification preferences are saved to your HMS account.
- Nearby alternatives: Requests send the coordinates used for the nearby search, search radius, and any excluded HMS location ID.
- Misuse reports: Reports you submit may include the business name, address, page URL, certification identifier, reason, and comments. Screenshots and matched certification-claim text are included only when you choose to attach them.
- Additional website access: Access to restaurant and store websites beyond the supported platforms requires an optional permission.

Optional usage analytics
Usage sharing is off by default in Firefox. If you enable it and grant applicable permissions, the extension sends feature interactions, supported-site labels, browser family, extension version, session information, and a randomly generated installation identifier to HMS. HMS forwards approved fields to Google Analytics 4 to understand usage and improve the extension.
Analytics does not include searches, page URLs, business names, addresses, coordinates, favorites, account details, passwords, cookies, or screenshots. The installation identifier is not linked to your HMS account. HMS does not forward your browser’s IP address or user-agent string to Google Analytics.

Storage and controls
Settings, cached certification data, account session information, and diagnostic counters are stored locally. Diagnostic counters are not uploaded.
You can disable usage sharing in the popup or Settings → Privacy. This removes the local analytics identifier and unsent events; it does not delete events already delivered. Google Analytics retention depends on HMS’s configured retention settings.
Signing out removes local session credentials. Favorites already saved to your HMS account remain on HMS’s servers.

Contact
For privacy questions or data requests, contact info@hmsusa.org.