Last updated: 23 August 2026

Privacy Policy

Movepost (“we”, “us”) helps you update your mailing address across your accounts when you move. The product is a one-time paid Move Pass; our guides and printable checklist are free to read and need no account. This policy explains what we collect, what we deliberately donot collect, and your rights.

The short version: We never ask for, receive, or store your account passwords or banking credentials. We do not sell your data or your move to advertisers. You sign into each account yourself, on the institution’s own website — Movepost fills in your new address once you’re in and tracks your progress. If you ever connect your email (optional — not part of the default product), access is read-only — nothing in your mailbox can be changed, sent, or deleted — and we store only the derived list of services, never your messages. The limited server-side purchase measurement shared with Reddit is described below.

1. What we collect

  • Account you create with us: your email address and an authentication token. If you pay, our payment processor (Stripe) handles your card — we never see or store card numbers.
  • Your account list: the names of the services you pick from our registry or add yourself (e.g. “Chase”, “PG&E”), plus each one’s status (pending / done / skipped). This is stored so your list is there when you come back.
  • Your old and new address — the thing we exist to update. Your new address is what the Movepost extension fills into each site’s form for you.
  • If you connect your email: a reference to the read-only connection held by our integration partner Truto (revocable anytime — Movepost never holds your Google password or token) and the account list derived from who emails you. See section 3 — we never store your messages or their contents.
  • Basic website operations and campaign data: requests to our own movepost.app pages and errors, plus anonymous funnel-event volumes. When a campaign link supplies them, we keep only short campaign labels (utm_source, utm_medium, utm_campaign, and utm_content) and coarse device/browser classes. We do not keep the full landing URL, referrer, raw user-agent, Reddit click id, a visitor id, or a cross-event session id in this first-party funnel data. This is separate from extension browsing activity on third-party sites.
  • Third-party Reddit ad measurement: on /start only, Reddit’s browser pixel may record PageVisit (landing), AddToCart (checkout start), and Purchase (successful Move Pass). When you are signed in, the pixel init may include your account email and user id as advanced-matching keys. Section 6 describes the exact calls and the browser data available to Reddit.
  • Server purchase measurement: after a successful live $19 Move Pass purchase, our server may send Reddit the Purchase event time, USD value 19, a random per-purchase conversion identifier, https://movepost.app/start as the event source, your Movepost user id as an external match key, and Reddit’s rdt_cid when the purchase followed a Reddit ad click. We do not send your email, phone number, IP address, raw user-agent, address, checklist, account list, Pixel cookie, mobile advertising id, or payment-card data in this server event.
  • Minimized extension reliability outcomes: for services in our public registry, the extension may send the service identifier, extension/schema version, whether the work tab matched the expected domain, a coarse route class (login / address / other / unknown), whether an address form was found, the fill result, and a bounded outcome category. The visited URL is classified locally and is not sent.

2. What we do NOT collect

  • Your banking, credit card, utility, or any other account passwords or logins. We never ask for them.
  • Your account numbers or card numbers.
  • We do not log into your accounts, and we do not submit changes on your behalf.
  • Your browsing history or visited URLs in extension telemetry: no origin, hostname, pathname, query, fragment, full URL, page content, form values, account identifier, or free-text page diagnostic is transmitted or stored by the link-reliability endpoint.

3. Email account discovery (optional, read-only)

If you explicitly choose to connect your email, the connection is made through our integration partner Truto (their name appears on the Google consent screen) with a read-only permission — for Gmail, thegmail.readonly scope. Read-only means we cannot modify, send, delete, or label anything in your mailbox. We use it to search for who emails you, so we can spot accounts: a Chase email means a Chase account.

  • We run sender searches to derive your account list; we store the derived list (service names), never your messages or their contents.
  • Movepost never holds your Google password or access token — the OAuth grant lives with Truto, and Movepost stores only a reference to the connection. The extension never sees any of it. You can disconnect at any time, which revokes the grant at Truto and deletes our record of the connection.
  • Connecting your email is always optional. You can skip the scan and still use all of Movepost — it builds your list from our curated registry instead, and you can add any account yourself.

Movepost’s use of information received from Google APIs adheres to theGoogle API Services User Data Policy, including the Limited Use requirements.

4. How we use your data

  • To build, save, and track your change-of-address checklist.
  • To send you service messages (e.g. reminders you asked for, receipts, early-access updates).
  • To operate, secure, and improve the service, including aggregate service-level link reliability that cannot reconstruct a visited URL.
  • To measure successful Move Pass purchases and improve Reddit advertising using the browser and server events described below.

We do not sell your personal information, and we never give advertisers or data brokers your customer account, address, checklist, account list, contact details, or move data. The Reddit measurements are limited and separate from all of that: Reddit’s third-party pixel is on /start and receives the events below, any advanced-matching keys described in section 6, and the standard browser/network context that comes with any request to Reddit, and after a successful Move Pass purchase our server also sends the purchase event described above. Under laws such as CCPA/CPRA, using a third-party advertising pixel may count as “sharing” personal information for cross-context behavioral advertising, so we honor Global Privacy Control automatically — section 6 explains exactly what that suppresses and what it does not.

5. Who we share it with

Service providers used to run Movepost or measure advertising, each acting under their own security obligations:

  • Cloudflare — hosts the site and related edge functions.
  • Supabase — authentication, database, and server-side functions.
  • Stripe — payment processing (card numbers never touch our servers). When you buy as a guest after a Reddit ad click, the Checkout session we create also carries that click id as session metadata so the purchase can be attributed. That session is the only place we put it at Stripe, and Stripe keeps it under its own retention.
  • Reddit — third-party ad measurement: the published browser pixel on /start only (PageVisit, AddToCart, and Purchase; never in the extension or on third-party account sites), non-personal page/product metadata from that page, and the successful-purchase server event described in section 1. When you are signed in, the browser pixel may receive your account email and user id for ad matching. Reddit’s automatic email/phone page scanning remains off.
  • Resend — transactional email (sign-in links, receipts, service notices).
  • Truto — integration broker for optional email discovery: holds the read-only OAuth grant to your mailbox when you connect it (section 3), so Movepostnever holds your Google credentials. Disconnecting revokes the grant at Truto.
  • Anthropic — when you connect email for account discovery, we sendsender domains and display names derived from message headers (not message bodies) to Anthropic’s Claude classifier so it can suggest which senders look like real accounts. That input is processed to classify senders; we do not use it to train models on your behalf.
  • Firecrawl — crawls publicly available help pages so we can write address-change guides. It does not receive your personal data or the contents of your mailbox.

We may disclose data if required by law. We do not sell your personal information.

6. Reddit ad measurement

Reddit already records ad impressions in its own Ads Manager. Movepost does not create or claim a separate impression record. Only /start loads Reddit’s published browser pixel snippet in the page <head>. The snippet is not in the extension and is not on other site pages.

  • Calls we make: the public pixel ID with init, then three standard events — PageVisit on /start load, AddToCart when you click Get Move Pass (Reddit has no standard event named Checkout), and Purchase when a Move Pass unlock is confirmed after checkout. Track calls are two arguments with no price, currency, conversion ID, or other event metadata. Successful purchases are also reported by our server using the event time, USD 19 value, random conversion id, fixed event-source URL, Movepost user id, and Reddit click id when available.
  • Advanced matching and page metadata: when you are signed in, init may include your account email and Movepost user id. Reddit may also read non-personal public page/product metadata such as the page title, product name, description, and displayed price to improve ad relevance. We keep Reddit’s automatic email and phone page-scanning switches off, do not send phone numbers or mobile advertising IDs, and never send placeholder values.
  • Browser data Reddit can receive: Reddit’s third-party script can access the page URL, referrer, its cookies or ad-click information, and screen dimensions. Like any network recipient, Reddit also receives the request IP address and user-agent. We do not describe this data as anonymous.
  • What stays out: the pixel does not run in the extension and receives no address, checklist, account list, payment card, or move details from Movepost.

Your control: if your browser sends Global Privacy Control or Do Not Track,/start does not load Reddit’s script at all — no PageVisit,AddToCart, or Purchase browser event is sent, no advanced-matching key leaves the page, and we neither capture nor keep Reddit’s rdt_cid click id, dropping any copy an earlier visit stored. We store no separate consent flag and create no consent identifier. What that does not cover: it cannot recall a request already sent, and the server purchase event above still reports a completed sale with your Movepost user id, because that record follows the transaction rather than this browser. Blocking third-party scripts or movepost.app site data is the browser-level fallback.

Matching and retention: the server Purchase event identifies the sale by your Movepost user id, plus Reddit’s click id when the checkout carried one. Our delivery record exists to retry briefly and to prevent duplicate reporting; purchases older than Reddit’s seven-day delivery window are not sent, and the record is deleted with your account. Reddit handles data it receives under its ownprivacy policy.

7. Data security & isolation

Each user’s data is isolated so that one account cannot access another’s: per-user data is protected with database row-level security, encrypted in transit, and we store only the minimal data described above. Email tokens are encrypted at rest and never leave our servers.

8. Your rights

Depending on where you live (including under CCPA/CPRA and similar laws), you may have the right to access, correct, export, or delete your data, and to opt out of any sale or sharing of personal information. We honor applicable requests and do not sell personal information. Section 6 explains how Global Privacy Control suppresses Reddit click attribution, and what it does not cover. To exercise any right, email[email protected].

9. Data retention

We keep your checklist while your account is active and delete it on request or a reasonable time after account closure. Raw extension link-reliability outcome events expire within 30 days and are normally aggregated sooner; included raw events are removed after aggregation. The retained service-level aggregates contain no visited URL or user/account identifier. Movepost does not keep a copy of Reddit browser pixel events. A captured click id lives in this tab’s browser storage until you close the tab or clear this site’s browser storage; if you then buy as a guest, that click id is also sent to Stripe as metadata on that Checkout session alone (kept under Stripe’s retention) and stored in our server-purchase delivery record alongside your Movepost user id. We retain that delivery record as needed to retry briefly and prevent duplicate conversion reporting; events older than Reddit’s seven-day delivery window are not sent, and the whole record — click id and user id — is deleted when your account is deleted. Reddit controls its own retention for data it receives.

10. Children

Movepost is not directed to children under 16 and we do not knowingly collect their data.

11. Changes & contact

We’ll post any changes here and update the date above. Questions:[email protected].