Privacy
Privacy policy
Reading notes sends nothing about your browsing. Here is everything we do collect, and why.
Draft, pending legal review. Takes effect at launch.
Effective date: set at launch. Version: 2026-10-14.
Who we are
Echobraker is an independent project run by the Echobraker Project (a Reddit Lies project). It is not affiliated with Reddit, Inc. or X Corp. Contact: privacy@echobraker.com.
What the extension reads
On reddit.com pages, the extension reads the page structure on your device: the IDs of posts and comments, their community name, and whether an item has been removed. It uses these only to place notes. If you only read notes, nothing about your browsing is sent to us: the extension downloads the full public notes list and matches it on your device.
What we receive
Readers
A download of the public notes file. Cloudflare, our host, sees your IP address for that request, as with any website. We don't log it.
Contributors (only after you turn on contributor mode and agree)
- Your email address, stored encrypted and used to send sign-in links and replies to your appeals
- Passkeys you choose to add: the credential id, public key, signature counter, and how the device connects. Your fingerprint, face, or PIN never leaves the device, and we never receive the private key
- Your random public alias
- The date you passed the age screen (not your birth month or year)
- The notes and ratings you write, and the flags, reports and appeals you send
- The Reddit post or comment IDs and community names you write a note on or report, and the IDs on pages where you choose to see pending notes
- Session security data: a hashed IP address and a hashed device ID created by the extension
People who use the web forms
Flags, appeals and takedown notices include what you type. An optional contact email is stored encrypted and deleted 30 days after a decision.
What we never collect
- Your browsing history or the pages you view
- Raw IP addresses
- Device fingerprints
- Your birth month or year
- Advertising or third-party analytics data. This site uses no cookies.
We don't sell or "share" personal information, as the California Consumer Privacy Act uses that word.
Why we use it
To run notes and ratings, prevent sock-puppet accounts and abuse, and keep the service secure.
Who processes it
- Cloudflare: hosting, database, bot protection and transactional email (Cloudflare Email Service)
- GitHub: build and scoring jobs, with pseudonymous IDs only and no email addresses
Public data
Notes, ratings and status history may be published as data downloads under pseudonymous IDs. Emails, IP and device data are never included.
Retention
- Sign-in requests: 24 hours. Sessions: deleted 90 days after they expire or are revoked.
- Hashed IP and device data can't be linked to anything after 180 days, when the hashing key rotates.
- If you delete your account, your encrypted email is wiped right away. A one-way hash of it is kept for 1 year to prevent ban evasion. Your notes stay under "deleted contributor" unless you choose to delete them too.
- Flags, appeals and takedown notices: 2 years after the decision.
Your choices
In the extension you can turn contributor mode off, sign out everywhere, download your data, or delete your account. You can also email privacy@echobraker.com.
Do Not Track
We don't track you across sites, so there is nothing for a Do-Not-Track signal to switch off. Everyone is treated the same whether or not the signal is sent.
Children and eligibility
The service is for adults 18 and over who live in the United States or a US territory. We delete accounts we learn belong to anyone under 18 or outside those places.
Changes
We'll post changes here with a new effective date, and tell signed-in contributors in the extension before material changes take effect.