Privacy Policy
Effective date: July 17, 2026 · Contact: [email protected] · Hosted over HTTPS · No login or account required, ever
What ReallyFree never does
- Never collects or transmits your browsing history.
- Never uses third-party trackers or analytics scripts.
- Never fingerprints your device or browser.
- Never sells, rents, or trades your data to anyone, under any circumstance.
- Never requires an account, a login, or a password to use any feature.
- Never reads page content on sites other than the one you're currently viewing, and only when the extension is actively judging that page (see permissions below).
What ReallyFree collects, and why
Everything below is either off by default or is the minimum needed to deliver a feature you explicitly asked for.
1. Anonymous verdict reports — on, and here is exactly what they contain
ReallyFree judges pages locally, on your device, using a rules bundle it downloads from our server. When it judges a page, it sends us a short note saying what it decided, so we can find out where we are wrong. This is on when you install it. We are telling you here rather than burying it in a checkbox you would never find.
Each note contains exactly four fields:
- The domain —
canva.com. Never the page you were on. Notcanva.com/design/DAF9x/edit. The address bar tells us where you were; the path would tell us what you were doing, and that is none of our business. We cut it off inside your browser, before anything is sent. - Rule hits — which detection rules fired (e.g., "signup wall detected").
- Verdict — green (you get everything you need) / yellow (something's missing) / red (it costs money).
- Timestamp — when the check happened.
Nothing else is in that payload — no name, no email, no account ID, no device identifier, no IP-based profile we build on our end. A bare domain is something anyone can look up on the open web; we learn nothing about you from it.
You can turn it off in one click — Settings, in the popup — and it stops immediately. We would rather you left it on, because it is how we find our own mistakes. But it is your call, and we will not make it hard.
When you tell us we got a verdict wrong, that report does include the page you were looking at — because you are deliberately telling us about that exact page. You chose to send it. That is a different thing from us taking it quietly, and we do not treat the two the same.
2. Verdict lookups — site names, never searches
To draw dots on a search results page, the extension asks our server for
verdicts on the sites in your results. It sends the site names
only — canva.com, never the full address, and
never the words you searched for. The same happens when
you tap a blue question mark or a grey dot: we send that one site's name
and check it right then, in front of you.
Site names we can't answer yet go on our to-check list so we can go judge them. That list contains site names and nothing else — no account, no identifier, nothing that ties a name on it back to a person.
3. Money
There isn't any. ReallyFree has no membership, no paid tier and no checkout. We take no payment from you, so there is no payment data to talk about. There is no account, no password and no login anywhere in ReallyFree. We never ask for your email address and we do not send email — there is no list to be on.
4. This website
reallyfree.app runs no analytics, no tracking pixels, no advertising scripts
and no cookies. There is nothing on this site to opt out of. Our host
(Cloudflare) keeps standard server logs, as every web host does.
If you uninstall the extension, your browser opens one page here —
reallyfree.app/?bye=1 — so we can count the uninstall; the
address carries no identifier and nothing about you.
Where your data lives
Anonymous verdict reports, wrong-verdict reports you chose to send, and the to-check list of site names are stored on Cloudflare (Workers + D1, a standard SQLite database we fully control and can export at any time — no vendor lock-in). Nothing is handed to a third-party data broker or ad network, ever, for any price.
Browser permissions, explained
Every permission ReallyFree requests maps to a specific, narrow job. Nothing here is asked for "just in case."
| Permission | What it's for | What it does NOT do |
|---|---|---|
storage |
Saves your settings and a local cache of verdicts on your own device. | Nothing here leaves your device unless you've opted in to reporting (see above). |
alarms |
Schedules a daily check for an updated detection-rules bundle from our server. | Sends no personal or browsing data — it's a "do you have anything newer?" request. |
activeTab |
Lets the extension read the page you're on, only for the moment you click its toolbar icon. | Grants no standing access to other tabs, other times, or pages you haven't actively asked it to check. |
scripting |
Runs the paywall/price check on the page after a click, using the temporary access activeTab just granted. |
Cannot inject into pages you haven't triggered a check on. |
host_permissions — our own server only
(reallyfree-api.stephenmarcus123.workers.dev) |
Lets the extension talk to us, and only to us: fetch a verdict, fetch the rules bundle, send a report you asked it to send. | Grants no access to any other website. There is no permission here for any third party, and there is no third party. |
| Narrow content scripts (Google, Bing, DuckDuckGo results pages only) | Reads each search result's destination link (href) to draw a verdict dot, and sends the site names — never your search words, never full addresses — to our server to fetch the verdicts (see "Verdict lookups" above). |
Never reads or alters the search-engine's own page layout, ranking, or ads; never sends your search words or a result's title anywhere; never runs on any other site. |
Your rights
Because there's no account or login, there's no profile tied to your identity to "log into" and manage — and we never ask for an email address anywhere in the product. Anonymous verdict reports and the to-check list contain no identifier that ties them back to a person, so there's nothing in them to look up by name or email in the first place. If you've emailed [email protected] and want that correspondence deleted, say so and we will delete it.
Changes to this policy
If this policy changes, the effective date at the top of this page will change with it. Material changes affecting what's collected will be called out plainly, not buried.
Questions
Email [email protected] — a person reads it, not a ticket queue.