Costco Tools Extension — Privacy Policy

Last Updated: August 13th, 2026

Tremscol LLC (“we”) operates the Costco Tools browser extension, distributed under the Restock Bot Alerts brand. This policy explains what the extension collects, why, and how it is handled. The extension is for active subscribers only.

This policy covers the browser extension specifically. Our general service privacy policy is available at restockbotalerts.com/privacy.html.

What the extension does

Signed-in Costco members use the extension, inside their own Costco account, to:

Add a chosen quantity of a product to their own Costco cart and go straight to Costco’s checkout page.
See how many precious-metal units they may still order today, and when a particular item can be reordered.
Save Costco products to their own Costco wish lists.
See live market prices and what buyers pay for a precious-metal item, alongside Costco’s own price.
Optionally save their own payment cards, encrypted on their own computer, to make Costco’s checkout form quicker to fill in by hand.
Export their own precious-metal orders to their personal Restock Bot Alerts dashboard.

The extension never buys anything for you

It adds items to your cart and opens Costco’s own checkout page. It stops there. It does not place orders, does not fill in or submit the checkout form, and never sees or handles your payment details. The checkout form is Costco’s, and you complete it yourself.

Nothing about your cart or your checkout is sent to us.

The purchase-limit counters read your order history without sending it

The extension reads your order history in two unrelated situations, and only one of them sends anything. This section is about the one that does not; the export is covered in the next two sections.

To tell you how many precious-metal units you have left today, the extension reads your own recent Costco order history in your browser. Costco limits precious-metal purchases per delivery address per day, so the count only means anything if it reflects what you actually ordered.

That particular reading is never transmitted. It is held in your browser’s memory and a short-lived local cache so the extension does not re-request it on every page, and it is never sent to us or to anyone else. It is used only to draw the counter you see in the panel.

Running an export is a separate action, on a separate code path, and it is the only thing that ever sends order data anywhere — and only when you ask it to. What it sends, and what it deliberately does not, is set out below.

Only precious-metal orders ever leave your computer

This is the most important thing to understand about the export, so we want to be exact about it.

When you run an export, the extension inspects your orders on your own computer and transmits only orders that contain precious metals (gold, silver and platinum bullion, bars and coins). Every other purchase is filtered out before anything is sent, and the filtering happens on your machine — not on our servers.

Online orders — the filter runs first. We never even request the details of an order that does not contain precious metals; those orders are identified and skipped before any detail page is opened.
In-store receipts — Costco does not say what is on a receipt until it is opened, so each receipt is read in your browser to check it. Receipts without precious metals are discarded on your computer immediately and are never transmitted.
Within a single order — the filter applies line by line, not just order by order. If you bought gold alongside groceries in the same transaction, only the gold line items are sent. The other items are dropped on your computer, the order total we receive is the precious-metal total (not what you actually paid), and the payment amount is scaled to the precious-metal share of the transaction.

We therefore never receive a list of your other Costco purchases, and we have no way to reconstruct one. If an export finds no precious-metal orders, nothing is sent at all.

Saved payment cards stay on your computer, encrypted

The extension can save your payment cards so they are ready when you check out. This is optional — it does nothing unless you choose to use it — and everything about it happens on your own computer.

Your cards never reach our servers. Not when you save them, not when you use them, not ever. There is no copy of them anywhere but your own browser.

They are encrypted with a password only you know. You choose that password; it is never stored anywhere, in any form, and it is not sent to us. We cannot read your saved cards, and neither can anyone who gets hold of your computer without that password. If you forget it, the only way forward is to delete the saved cards and start again — we have no way to recover them.
Your card password is separate from your Costco Tools login. Being signed in is not enough to see your cards; you enter the card password too.
At checkout, the extension copies one value at a time to your clipboard — usually just the security code — so you can paste it into Costco’s own payment form. It clears your clipboard about 90 seconds later, while the checkout page is still open. It does not fill Costco’s payment fields for you, and it never places an order.
We do not see which card you chose, when you used it, or whether you used the feature at all.

Removing the extension erases your saved cards. They exist only in the extension’s own storage in your browser, so uninstalling it deletes them — we hold no copy of them, and there is nothing for you to ask us to remove. This is also the answer if you cancel your subscription and can no longer open the extension: uninstalling it removes the cards. (The one value you may have pasted at checkout is your clipboard’s, not ours; the extension clears it about 90 seconds later, and your operating system’s clipboard history is yours to manage.)

One exception, and it is yours to control: a backup file you exported yourself. The extension can write your cards to an encrypted file so you can move them to another browser. That file is encrypted with your vault password, it is never sent to us or to anyone else, and we never see it — but it is an ordinary file on your computer, so it survives uninstalling the extension. Deleting it is up to you, and the extension reminds you to once you have finished loading it in.

Your account is a separate thing. Your email address and your subscription record are held by us and by our processors (see Storage and processors), as is anything you have already exported to your dashboard; an uninstall does not touch any of that. If you want those removed too, contact us — see Retention and your rights.

What we collect

Email address — you enter it to sign in; we email you a one-time code (no passwords). Used to identify your subscription and authenticate you.
Precious-metal order history — only when you choose to run an export, and only for orders containing precious metals (see above): order numbers, items, quantities, prices, dates, and payment method type/last-4 as shown in your Costco account, and the membership number of the Costco account the export was run from. This is sent to your Restock Bot Alerts dashboard so you can view and analyze your own purchases; the membership number is what keeps orders from different Costco accounts apart there.
Authentication token — a short-lived login token, stored locally in the extension to keep you signed in and re-checked periodically. Never exposed to web pages.

What we do NOT collect

We do not collect your Costco password (login is a one-time email code) or your shipping address.
We do not collect browsing history, and the extension only runs on costco.com.
We do not receive your non-precious-metal purchases. They are filtered out on your own computer and never transmitted (see above).
We do not receive the order history read for the purchase-limit counters — it never leaves your device (see above).
We do not receive your cart contents, your checkout details, or any payment information.
We do not receive your saved payment cards, or the password that encrypts them. They never leave your computer (see above).
Wish list data is not stored on our servers — when you save an item, the extension writes to your Costco wish list via Costco’s own API using your logged-in Costco session. We do not keep a copy.

How your data is used

Solely to provide the extension’s features: authenticate you, confirm your subscription, and populate your dashboard with your order data.
We do not sell or transfer your data to third parties.
We do not use your data for advertising, creditworthiness, or lending, or for any purpose unrelated to the extension’s function.

Storage and processors

Order and account data is stored in our database (Supabase, hosted in the US) and billing is handled by Stripe. These processors handle data only to provide the service.

Retention and your rights

You can request deletion of your account and associated data at any time by contacting us at support@tremscol.com.
Deleting the extension stops all collection, and erases any payment cards you saved in it (see above); your dashboard data can be removed on request.

Contact

Questions about this policy: support@tremscol.com

Costco Tools is not affiliated with, endorsed by, or sponsored by Costco Wholesale Corporation. It operates only on the member’s own account data, at the member’s direction.