Privacy policy

What the extension does

Veil is a Chrome extension that blurs posts on X (x.com, twitter.com) and YouTube (www.youtube.com) that are about topics you choose to mute, such as "AI" or "Dune spoilers". It runs only on those sites. To decide whether a post matches a muted topic, it has the post classified by TypeSafe's Jev model.

What is sent, and to whom

For each post that comes near your screen on a supported site, the extension sends:

• The post's visible text: the author's handle or channel name, the post or video title, the post text or description snippet, quoted text, link-card title, image descriptions, or comment text.
• Images, if "Scan images" is on: up to two of the post's images or video thumbnails, resized.
• Your muted topics: the words in your muted list, so the post can be checked against them.
• An anonymous install ID: a random identifier created when you install the extension, used to apply the free daily limit and, if you buy a GTA 6 Pass, to unlock the pass in this browser. It is not linked to your name, email, X or Google account, or any other identity.

Where it goes depends on how you use the extension:

• By default, it goes to our classification server, which runs on Cloudflare Workers. The server forwards the post content and muted topics to TypeSafe's API (api.typesafe.ai), receives yes/no scores back, and returns those scores to your browser. The install ID is not sent to TypeSafe.
• If you enter your own TypeSafe API key in the extension's settings, posts are sent from your browser directly to TypeSafe and never reach our server.

The extension does not send your browsing history, the pages you visit outside the supported sites, your account details on X or YouTube, your messages, or anything you type.

What we store

• Post content, images and muted topics: not stored. They are held only in memory for the time it takes to classify a post, then discarded. They are never written to logs.
• Usage counter: for each install ID, the number of classification units used today, so the free daily limit can be applied. It is overwritten each day.
• Operational logs: for each request, the response status, how long it took, how many topics and images it contained, and how many units it used. These logs contain no post content, topics, images, install IDs or IP addresses, and Cloudflare keeps them for a few days.
• IP addresses: used by Cloudflare's rate limiter to prevent abuse. To stop the free limit being reset by reinstalling, we also keep a one-way hash of the IP address with the number of new installs seen from it that day. The IP address itself is never stored.
• First seen: for each install ID, the day it was first seen, so a new install's first-day allowance can be applied.

The GTA 6 Pass

The GTA 6 Pass is an optional purchase that lifts the daily limit for 14 days. Gumroad sells it as the merchant of record: it takes the payment, charges any sales tax, and sends the receipt. Your payment details go to Gumroad, never to us. See Gumroad's privacy policy.

• At checkout: the link to Gumroad carries this browser's install ID and a device name such as "Chrome on macOS", so the purchase can unlock this browser straight away.
• From Gumroad: after a purchase Gumroad notifies our server with the sale's details, including the license key and your email address. We use the license key and do not store your email address.
• What we store for a pass: the license key, the sale ID, when it was bought, when it ends, whether it was refunded, and, for each browser using it (up to three), its install ID, device name and the date it was added. We check the key with Gumroad's license API to confirm the purchase and catch refunds.
• Uninstalling: the page Chrome opens after you remove Veil carries the install ID, so that browser's place on the pass is freed for another one.

Pass records are kept while the pass is in use, and deleted on request: write to the contact address below.

What stays on your device

Your settings, muted list, the optional API key you enter, the anonymous install ID, when your GTA 6 Pass ends, today's hidden-post count, your daily usage, and which posts you chose to reveal are stored in Chrome's extension storage on your device. Classification results are cached in your browser session so the same post isn't sent twice. Uninstalling the extension deletes all of this.

Third parties

• TypeSafe provides the Jev model that classifies posts. It receives post content and muted topics as described above. Its handling of that data is governed by TypeSafe's privacy policy.
• Gumroad sells the optional GTA 6 Pass and processes its payments, as described above.
• Cloudflare hosts our classification server and processes requests to it. See Cloudflare's privacy policy.
• X and YouTube images: when "Scan images" is on, the extension downloads post images from pbs.twimg.com and i.ytimg.com, the same servers your browser already loads them from.

We do not sell, rent or share your data with anyone else, and we do not use it for advertising, profiling, credit decisions or any purpose other than blurring posts.

The website

The Veil website (veil.dhaiwat.com) loads nothing from third parties and sets no cookies. If you join a list to hear when Veil is on the Chrome Web Store or when Veil Unlimited is available, your email address is stored, with the time you signed up and which list you joined, only to tell you that. It is never shared, sold or used for anything else, and it is deleted on request: write to the contact address below. Like every request to our server, signup requests pass through Cloudflare's rate limiter, which uses your IP address and does not store it for us.

Chrome Web Store Limited Use

The use of information received from Chrome APIs and from the pages the extension runs on adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Data is used only to provide the extension's single purpose, blurring posts about topics you mute, and is not transferred, sold or used for any other purpose.

Your choices

• Turn the extension off at any time with the switch in its popup. Nothing is sent while it is off.
• Turn off "Scan images" in settings to send text only.
• Enter your own TypeSafe API key to bypass our server entirely.
• Uninstall the extension to delete everything stored on your device. The daily usage counter for your install ID then stops being updated and holds only a single number with no link to you.

Children

The extension is not directed at children under 13, and we do not knowingly collect information from them.

Changes

If this policy changes, the new version will be posted on this page with a new effective date. Material changes will also be noted in the extension's Chrome Web Store listing.

Contact

Questions about this policy or your data: dhaiwatpandya@gmail.com.