Privacy.

Version 1.1.4 · October 20, 2026

Cloud matching

The extension asks for consent once during setup and remembers your choice across searches and updates. You can withdraw it in Account & privacy.

After you accept the disclosure, your complete search request and selected listing titles, text and URLs go over HTTPS to Filter & Find’s server, then through OpenRouter to OpenAI’s GPT-6 Luna. Provider retention policies apply. API credentials stay on the server. When required public facts are missing, the model can search through OpenRouter’s Exa web-search service. Queries use listing identity and missing public attributes; search-provider policies apply. Retrieved source URLs and quotes appear with results. Facts that cannot be verified stay unknown; model memory is not accepted as evidence.

What stays in the browser

Saved prompts, source URLs, schedules, listing excerpts and results remain in extension storage. Updates preserve this history. Export before uninstalling or changing browser profiles. Site access is granted per website. Website requests may use your existing signed-in session; the extension does not forward website passwords or cookies to the matching server, submit forms, or bypass verification pages.

Records and limits

Free includes one AI batch of up to 10 listings daily. Paid record limits are supplied by the server. Usage is shared across linked browsers. The server keeps hashed request fingerprints, decisions, supporting listing quotes and up to three web citations for up to 30 days (web-cited decisions expire after 24 hours); raw prompts and listing descriptions are not stored in its application database. Account, usage and subscription records support authentication and billing. Failed paid-item checks refund their reserved records. A free batch is refunded if none of its new checks complete. Cached decisions consume no fresh allowance.

Your controls

Stop a scan, pause schedules, revoke website permissions, withdraw cloud consent or export/delete browser history. Manage subscriptions and delete account records from the account page. Deleting an account does not erase history stored in other browsers. Stripe processes payment information; card data is not held by the extension.

Cloudflare hosts the service. OpenRouter requests require providers accepting the no-data-collection routing preference; provider retention policies still apply. See OpenRouter’s privacy policy. Browser connection tokens expire after 90 days. Daily network abuse counters use salted hashes and expire after two days.

AI decisions can be wrong. Inspect supporting source text and verify important facts.