NoAffiliation privacy

Last updated October 29, 2026 (weekly uploads; a one-time human check; commission estimates worked out on your device; yes-only page labels)

What stays on your device

• Your settings and allowed creators, in Chrome’s extension storage (synced between your own Chrome installs if you use Chrome sync).
• Your personal stats: for each affiliate link you met, the shop’s domain, the affiliate network, the affiliate ID, whether you removed or kept it, and when. Never full URLs or page addresses.
• Pages you visit that have affiliate links: the page’s address (without anything after a ? or #) and how many affiliate links it has, so it can be labelled when it shows up in search results. Up to the 3,000 most recent pages. You can turn this off, or forget them all, in the dashboard.
• If you share stats: the product prices that removed links led to are read and turned into an estimate in your browser. The prices themselves never leave it.

You can export or reset your stats from the extension’s dashboard at any time. Uninstalling the extension deletes all of it.

What is sent, and when

• A one-time check (only if you choose to share). Turning sharing on opens a page on this server with a Cloudflare Turnstile check that a person, not a script, turned it on. Turnstile runs in that page like on any site that uses it. Passing it gives your browser a random ID that is not linked to you. Sign-ups from cloud-server networks aren’t accepted, so some VPN users need to turn the VPN off for this step.
• Anonymous stats (only if you choose to share). When the extension is installed, a welcome page asks whether to share; nothing is sent unless you pick “share”, and you can change it any time in the dashboard. If you share, once a week, for the calendar week that just ended: counts of removed and kept affiliate links, grouped by the domain of the site the link was on, the shop’s domain, the network and the affiliate ID; and, for removed links that led to a product page with a price, how many there were and the commission they might have earned, as a low–high dollar range worked out in your browser. Never a product, a page address or a price. You can leave out the site domains in the dashboard’s settings.
• With site domains included, also: links whose own server redirected you to an affiliate link (for example a site’s click tracker), per day, described only by their domain, the first one or two plain words of their path (such as /v1/otc/) and the name of the parameter that held the shop address, so they can be added to the rules for everyone. And pages full of affiliate links that you visit: the page’s domain and the first plain words of its path (such as /tech/best-laptops; never anything after a ? or #, and never ID-like parts), as a plain “yes, affiliate-heavy”, with no counts, so search results can be labelled for everyone. A page already on the shared list isn’t reported again, except on about one visit in twenty, when your browser says whether it still is.
• Private addresses (IP addresses, localhost, intranet names) are never included.
• Links you suggest (only when you choose to). When you mark a link as an affiliate link and leave “Suggest it for everyone” ticked, the extension sends its domain, the first one or two plain words of its path (such as /v1/otc/) and the name of the parameter holding the shop address, so it can be reviewed and added to the rules for everyone. This is sent even if you don’t share stats, because you chose to send it (it needs the one-time check too). Your own rules (creators and sites you always allow or always remove, and the links you mark) stay in your browser.
• Rule updates. Once a week the extension checks two small version files and, when they changed, downloads the latest list of affiliate networks and the community’s list of affiliate-heavy pages. If you share stats, it also downloads how to read prices and the estimate’s rates (/price-rules.json, /estimates.json). Nothing about you or your browsing is sent with them. Search results are matched against the list inside your browser: what you search for is never sent anywhere. You can turn this off in the dashboard.
• Checking a page. When you ask the extension to check a search result (by clicking its label, or “Check every result” in the toolbar menu), it loads that page in the background, without cookies, to count its affiliate links. That request goes to the site itself, like opening the page would; nothing is sent to this server.
• Short links. When you click a short link such as amzn.to or geni.us, the extension follows it to see where it really goes, so it can clean it. That request goes to the short-link service itself, without cookies, so no affiliate cookie is set in your browser. You can turn this off in the dashboard.

What the server keeps

Stored on Cloudflare. The server does not store IP addresses. To limit abuse, sign-ups are counted per day under a one-way hash of the IP address, and those counters are deleted daily.

Under your random ID, the server keeps only: the day you joined, the last week you sent and how many weeks you’ve sent (an install counts from its third week), and, with site domains included, the link redirects you reported and links you suggested.

Your weekly counts are added straight into weekly totals for each site, shop, network, affiliate ID and site–affiliate pair. Those totals hold no install IDs. To count how many different installs reported something without storing who, each total also has a “fingerprint”: 512 on/off switches, and each install switches on one of them, picked by a secret, one-way hash of its ID and that total’s name. The switch picked for one total says nothing about the switch picked for another, so totals can’t be linked to each other or to an install. One honest limit: while a fingerprint exists, someone holding the server’s secrets could test whether a given install ID’s switch is on for a given total (certain at small numbers, unreliable at large ones). That is less than storing the IDs outright, but it isn’t nothing. Fingerprints are erased after 13 weeks; after that only totals for what was shown on the dashboard are kept, and the rest are deleted. Reported pages work the same way, with 128 switches each.

The community dashboard only shows an affiliate, site or site–affiliate pair once at least five different installs have reported it, and a page is labelled for everyone only once three have, so nothing can be traced to one person.

Deleting your shared data

Turn off “Share anonymous stats”. The extension immediately asks the server to delete everything it keeps under your install’s random ID, and forgets that ID. Turning off just the site-domain option deletes the link redirects you reported, and nothing queued keeps site domains. What you already added to the weekly totals stays there: those are anonymous sums that can’t be told apart.

What we never do

• Sell, rent or share data with advertisers or anyone else.
• Collect names, emails, accounts, full URLs, page contents, prices, search terms or browsing history.
• Use the data for anything other than the extension’s features and the public community dashboard.

Changes

If this policy changes, the date above changes with it. Anything that would send more data than described here will be opt-in.