Don't Be A Fool ← Back to site

Privacy Policy

Last updated 4 August 2026 · Applies to the Chrome extension and this website

This extension exists to warn you about companies that take more than they say. Writing a vague privacy policy would be a poor joke. So here is exactly what leaves your machine, exactly what is kept, and for how long.

The short version

• No account. No name, no email, no password to use the extension.
• The legal documents it reads are passed to a language model and never stored.
• What is stored is a random ID, a count of free reads, and whether you paid.
• Nothing is sold, rented, or shared for advertising. There is no ad network in this product.
• Nothing is sent at all until you press Check this site.

Who we are

"Don't Be A Fool" (the "extension") is operated by Doctoria Medical Solutions Ltd, contactable at jadtounsi5@gmail.com. That address reaches a human and is the right place for any request in this policy.

What the extension sends, and when

Nothing is sent while you browse. The extension only acts when you press Check this site, or when you have explicitly turned on automatic checking in settings (off by default).

When a check runs, these are transmitted:

Data	Why	Where it goes
The address, hostname and title of the page you are on	So the verdict names the right site	Our server, then Google's Gemini API
The text of the terms, privacy policy and cookie notice linked from that page	It is the thing being read	Our server, then Google's Gemini API
A random install ID (a UUID generated on your device)	To count free reads and recognise a paid install	Our server
Which reading depth (model) you chose	To call the right model	Our server

The install ID is generated locally with crypto.randomUUID(). It is not derived from your hardware, your Google account, or anything about you, and it is not linked to any identity. Deleting the extension destroys it.

What is kept, and for how long

Item	Where	Retention
Legal document text and page addresses	Held in memory for the duration of the request	Not stored. Discarded when the verdict is returned
Install ID, count of free reads used, paid flag, plan	Our database (Upstash Redis)	Until you ask for deletion
Stripe customer and subscription identifiers	Our database, mapped to the install ID	Until you ask for deletion
The verdict itself	Your browser only, in extension storage	7 days, then re-read on next visit
Your settings	Your browser only	Until you clear it or uninstall

Cached verdicts never leave your machine. A site you have already checked costs no further requests for seven days.

Who else processes your data

• Google (Gemini API) — receives the legal documents and page address in order to read them. Requests are made through the paid API, not the consumer chat products.
• Vercel — hosts the server and this website, and therefore processes requests to it.
• Upstash — hosts the database holding the install ID, counters and paid flags.
• Stripe — handles payment if you buy a plan. Stripe collects your payment details and email directly. We never see or store your card number.

Each is used only to run the product. None of them is paid to profile you, and no data is sold to anyone.

This website

This website counts page views using Vercel Web Analytics. It sets no cookies, does not follow you to other sites, and does not build a profile. It records the page, the referrer, and coarse device and country information. Fonts are bundled into the page rather than loaded from a font CDN, so no third party learns you visited.

The extension itself contains no analytics of any kind.

Permissions the extension asks for

Permission	What it is for
storage	Keep your settings and the 7-day verdict cache on your device
activeTab	Read the signup page you asked about
scripting	Place the verdict card onto that page
optional_host_permissions: <all_urls>	Optional — installing grants nothing. Signup pages exist on any domain, so this cannot be narrowed to a fixed list in advance. It is asked for at the moment you first press Check this site, and you can decline: the extension still works on the tab you clicked. Documents are fetched only when a check runs.

The extension does not read your email, your passwords, your form entries, or the content of pages you browse. It looks for a signup form and the legal links printed next to it, nothing else.

What we never do

• Sell or rent your data. There is no buyer and no arrangement to create one.
• Use your data for advertising, or allow anyone else to.
• Use the documents it reads to train any model.
• Track you across websites, or attempt to identify who you are.

Your rights

Because we hold no identity data, the install ID is the only handle that exists. You can:

• Delete everything held on our side — email us your install ID (settings page shows it) and we will erase the record.
• Delete everything held locally — clear the cache in settings, or uninstall the extension.
• Ask what is held — email us and we will tell you, which will be a counter and a flag.
• Object or complain — if you are in the EEA or UK you may complain to your data protection authority.

Where the GDPR applies, our lawful basis is performance of a contract for running a check you asked for, and legitimate interest for preventing abuse of the free tier.

Children

The extension is not directed at children under 13 and we do not knowingly collect their data.

Security

Traffic is encrypted in transit. The model API key lives in a server environment variable and is never sent to the browser — the extension holds no credentials of any kind.

Changes

If this policy changes materially, the date at the top changes and the extension's release notes will say so. We will not quietly widen what we collect — that would rather defeat the point.