Privacy Policy

Introduction

Karma-Crafter ("we," "our," or "us") provides a Chrome extension and website to help you grow Reddit karma by drafting and posting comments with your approval. This privacy policy explains what data we collect, how we use it, and your rights. We do not sell your data and we use it only to provide and improve our service.

Chrome extension — data we collect and use

When you use the Karma-Crafter Chrome extension with AI-suggested comments enabled, we process the following website content:

• Reddit post title and body of the page you are viewing
• Comment text you type or edit when using the "rephrase" (tone) feature

This data is sent to our backend (Supabase) only to generate AI-suggested replies. We do not use it for advertising, profiling, or any purpose unrelated to the extension's single purpose. The extension also stores locally on your device: (1) optional Supabase URL and API key if you configure AI in extension options, and (2) a locally generated session ID used for rate limiting and debugging. We do not collect your name, email, Reddit credentials, browsing history, or location.

Website — data we collect and use

On our website (karma-crafter.web.app), we use Google Sign-In (via Supabase) so you can sign in to download the extension. When you sign in, we receive your Google account email and profile information from the provider; we use this only to verify access for the download and do not sell or share it with third parties for marketing. We may use analytics (e.g. Firebase) to understand site usage in aggregate; such data is not used to identify you personally for advertising. Newsletter sign-up, if offered, collects only the email you provide for updates.

How we use your data

We use the data described above solely to: (1) provide AI-suggested comments and rephrase features in the extension, (2) allow you to sign in and download the extension from our website, (3) send you product updates if you opted in, and (4) improve our service (e.g. debugging, rate limiting). We do not use or transfer user data for purposes unrelated to our product's single purpose. We do not use or transfer user data to determine creditworthiness or for lending purposes.

What we do not do

• We do not sell or transfer your data to third parties, except as needed to operate our service (e.g. our hosting and API provider).
• We do not use your data for advertising or to build advertising profiles.
• We are not affiliated with Reddit; we do not access your Reddit account credentials.
• We do not read your browsing history beyond the current Reddit page when you use the extension.

Third parties

We use Supabase for authentication (website) and for our API (extension). Data sent to Supabase is used only to provide our service. Google Sign-In is subject to Google's privacy policy. If we use other providers (e.g. hosting, analytics), we choose them with care and they process data only on our instructions for the purposes described here.

Data retention and security

We retain data only as long as needed to provide the service and as required by law. We use HTTPS and industry-standard practices to protect data in transit and at rest. The extension runs only when you click it; we do not run background processes that collect data without your action.

Your rights

You can stop using the extension at any time and remove it from Chrome; locally stored data in the extension will be removed with the extension. You can sign out of our website and revoke Google Sign-In access in your Google account settings. For requests regarding your data (access, correction, deletion), contact us at the email below.

Contact

For privacy-related questions or requests, contact us at founder@karmacrafter.com.