Privacy

Last updated: 10 November 2026. Unfret is made by Kroshtan (Floris van Beers, the Netherlands).

What a check sends

Nothing leaves your browser until you click Check this page in the extension (or an agent calls /v1/check). Then the page address, the product facts (title, brand, seller, price, ratings, reviews, shop policies) and the page's visible text go to our server in the EU. Account menus, addresses, forms and anything you typed are removed in your browser first.

The link checker sends only the link, when you tap Check. Our server then fetches the page itself, so the shop sees our server, not you. A link shared to Unfret from another app stays in your browser until you tap Check. The page keeps no history; only your sign-in or API key stays in your browser, until you sign out.

What we keep

• Your wallet and its balance: the Solana address you signed in with and how many checks you have left. No name, e-mail or password.
• Or your API key and its balance: the key's public ID, its balance, and one-way hashes of the key and its recovery code. We show you the key once and never store it, so keep the recovery code: we can't recover the key for you.
• Card payments: Polar sells the pack to you as merchant of record. It collects your payment details, e-mail and country, charges VAT and sends the receipt, under its own privacy policy. We tell Polar only the pack and the key's public ID. We keep the order number, the amount and the key it topped up for 180 days, for refunds and questions; never your name, e-mail or address.
• Invites: for each invite code that comes with a pack, a one-way hash, the day it was issued and the day it was used. Not who bought it, not who used it, no IP address: nothing links the buyer to the person they invited. The codes are shown once, on your payment confirmation, and wiped from our server as they are shown (unshown codes go with the purchase record within a week). Until then the checkout page keeps a random claim token for them in your browser, for up to three days. An account that used an invite is marked as having used one, not which.
• Not the pages you check. Page addresses and contents aren't stored and are never linked to your wallet or key. A result stays in memory for up to an hour, so checking the same page again is free; a restart clears it. The only results we keep are ones you choose to share, without any link to you (below).
• Price history: for product pages with a public product number (an Amazon ASIN, a bol.com ID, a barcode), the day, the price and the claimed "was" price, under a one-way hash of the shop's domain and that number. No address, wallet, IP address or time of day. Kept 90 days, to show whether a "was" price was ever really charged.
• Shop facts: a shop domain's registration date, first certificate and VAT check, kept a week so they aren't looked up again for every shopper.
• Shop fingerprints: for web shops (not marketplaces), what their pages reveal about the business behind them: the first and last day we saw the shop, its platform and apps, the shape of its template, and the account IDs on its pages (analytics, ad pixels, payment accounts). This recognises shops run by the same operator. Never who checked the shop, which page, or our verdict. Kept 400 days after we last saw the shop.
• Product photo fingerprints: for the main photo of a checked product, its fingerprints (computed on our server; the photo goes to no one else), the photo's address on the shop, the shop and a one-way hash of the listing, to spot the same photo on another shop. Kept 400 days after last seen. Matching photos are shown as small thumbnails from our server, so your browser never contacts the other shop.
• Recent answers for agents: the answer to a paid check of a page our server fetched itself, under a one-way hash of the listing, for one day, so the same unchanged listing can be answered quickly. No address, caller or payment details.
• "Spotted recently" examples: checks we ran ourselves on public product pages, to show what a check finds. Each has the product's title, the shop, the page address, the day, the result and sometimes a screenshot. Never a shopper's own check, nothing about who checks what. Each is reviewed before it is published and can be taken down (see "For shop owners").
• Results you share: only if you tap Share this result and confirm the preview. Anyone with the link then sees the verdict in our public wording (no score, no quotes from the page), the product's title, the shop, the product link (without tracking parameters) and the day of the check, for 90 days; then it is deleted. Nothing about who shared it: the share is sent without your sign-in, and we keep no wallet, key, IP address, time of day or view count with it. You get a delete code once (we keep only its hash) to delete it sooner. Shared pages ask search engines not to list them.

For shop owners

Contact e-mail addresses and phone numbers on a shop's pages are stored only as a keyed one-way hash, never shown to anyone, and used only to tell whether two shops share them (our legitimate interest in warning shoppers about networks of fake shops). They are deleted 180 days after we last saw them. To object, or to have a shop or contact detail removed, use the contact details at kroshtan.com; the same goes for a "Spotted recently" example of your page, which we'll look at again or take down. A shared result about your page can be reported from the page itself: it is hidden at once until we review it, and what you write is kept only until then.

Reporting a wrong result

If you press This is wrong (or an API user sends a report) and agree, that check's page facts, page text and result are shared for review. Personal details are removed in your browser and again on our server: greetings with your name, delivery and e-mail addresses, phone numbers, bank and card numbers, and everything after the ? in links. The checkout page is never kept.

Until it is reviewed, a report is linked to your wallet or key, only so a good report can earn free checks, and we count your reports per month (as a keyed hash). After review the report is deleted; the page and its label stay, without any link to you, as an example for improving the checks. Reports not reviewed within 30 days are deleted. If the result was right, we may check the same public page again ourselves and, after review, show that as a "Spotted recently" example; it carries nothing from your report.

Who else sees what

• A language model hosted by Scaleway in the EU reads the page text. We send it nothing that identifies you.
• Public registries (RDAP, crt.sh, the EU's VIES) answer the shop lookups. They see the shop's domain or VAT number, not you.
• Crypto payments are Solana transactions, public on the blockchain like any other.
• When you pay with SOL or USDC you choose your country, for VAT. It may be prefilled from the country Cloudflare sees your connection coming from; your IP address is never stored. For our tax records we keep the day, the country, the amount, the VAT and the transaction signature of each purchase for ten years, as the law requires.

Nothing is sold. No affiliate links, trackers or ads.

Your choices

Signing out in the extension's settings removes the session from your browser; uninstalling removes everything the extension stored. Questions: see the contact details at kroshtan.com.