Skip to main content

LanceRank Sync — Privacy Policy

Last updated: 23 April 2026

What this extension does

LanceRank Sync is a browser extension that reads stats from your own freelancer profile pages on the freelance platforms you have connected to your LanceRank account, while you are logged in, and forwards them to LanceRank so your public LanceRank profile stays accurate and up to date.

Where the extension runs

The extension only activates on the freelance platforms supported by LanceRank (the exact host list is declared in the extension's manifest.json and shown to you in Chrome's install permission dialog). It also runs on the single page https://lancerank.com/extension/connect — but only to receive the authorization token you grant when you click "Authorize".

It does not run on any other website. It does not have access to your email, banking, social media, or any other browsing.

Data the extension reads

When the extension activates on a supported platform page and detects you are viewing your own profile, it reads:

The extension does not read review text bodies, message contents, financial transaction details, or any information about other freelancers' profiles you happen to view. It only ever extracts data from a profile page if our checks confirm it is your own.

Data the extension sends

On successful extraction, the extension sends the data above (and only the data above) to https://lancerank.com/api/extension/sync over HTTPS, authenticated with a token tied to your LanceRank account. The data updates the corresponding fields on your public LanceRank profile at lancerank.com/<your-username>.

LinkedIn — authenticated API access (special case)

LinkedIn has moved profile data off its main page into an authenticated internal API (linkedin.com/voyager/api). To import your own recommendations, certifications, languages, education, and work experience, the extension reads the JSESSIONID cookie that LinkedIn sets on linkedin.com for your own logged-in session. This is used solely to obtain the CSRF token LinkedIn requires for its API calls.

The cookie value is never transmitted off your device — it is only sent back to linkedin.com as the standard csrf-token request header on calls to https://www.linkedin.com/voyager/api/identity/profiles/<your-vanity>/*. It is not stored by the extension beyond the request, not logged, and never sent to LanceRank servers.

LinkedIn data the extension reads via this API:

The same ownership check used on freelance platforms applies: the extension only reads YOUR profile (URL must match linkedin.com/in/<your-vanity>) and the server-side import endpoint rejects any data whose vanity does not match the LinkedIn URL you connected to your LanceRank account.

Data we do NOT collect

Authorization & revocation

The extension can only sync data after you explicitly click "Authorize" on lancerank.com/extension/connect. This action issues a token bound to your LanceRank account. You can revoke this token (per device) at any time from your dashboard at lancerank.com/dashboard/extension. Once revoked, the extension on that device immediately loses the ability to sync any data.

Storage

The extension stores only your authorization token in chrome.storage.local on your device. On LanceRank servers, the data above is stored in our PostgreSQL database, in the same row as your publicly displayed profile data.

Sharing

We do not sell, rent, or share data collected by the extension with any third party. The data is used exclusively to populate your public LanceRank profile, which is what you signed up for.

Account deletion

Deleting your LanceRank account (from your dashboard settings) removes all data the extension has ever synced, along with all your other LanceRank data.

Operator

The LanceRank Sync extension is operated by MARANOTE LTD, a private limited company registered in Cyprus (company number ΗΕ 432111), with its registered office at Karpasias 3, 4185 Limassol, Cyprus.

Contact

Questions or concerns: [email protected].