Privacy Policy
Last updated 13 September 2026
This describes what the Caveat browser extension sends, stores, and never does. It's written to match what the code actually does, not as boilerplate — if this ever drifts from the extension's real behaviour, that's a bug in this page, not a change we made silently.
What Caveat sends
- Product ID (ASIN or equivalent) and marketplace (e.g. amazon.com)
- Product title, listed rating, and total review count
- A sample (max 20) of visible review text from the page you're on
- Seller ID and seller-page text — only if you click through to a seller's own page yourself; never fetched on your behalf
- A random, anonymous install identifier (no account, no email, no personal data) used to log an anonymous price observation for the price-check feature, and to show your own savings milestones
What Caveat never does
- Crawl Amazon or any other site
- Fetch a page you didn't open yourself
- Rewrite the page's own links or cookies
- Touch your cookies, saved payment details, or your Amazon account
- Run automated actions in your name (no clicking, no purchasing)
- Sell or share your data with advertisers — there are no ads and no ad-tech in this product
How the trust score works
The score is produced by a rule-based analysis of rating distribution and review language running on our server — no AI, no third-party model. Only the public data listed above is sent — nothing about you as a person.
The score is our automated opinion about a pattern in publicly visible reviews. It is not a finding of fact about any seller or product, and it can be wrong. If you're a seller and believe an analysis is inaccurate, see our dispute process.
How the price check works
Also rule-based, not AI. Every install that opens a product page already reads its price as part of the extraction above; that price is logged anonymously and compared against the same product's own price history to say whether today's price is unusually good, typical, or high. When it finds a genuinely good price, Caveat may show its own "Buy on Amazon" or "Buy on Etsy" link — a link you choose to click, never a rewrite of the marketplace's own Buy button. The Amazon link carries an Amazon Associates tag; the Etsy link routes through Etsy's affiliate program via Rakuten Advertising. Caveat earns from qualifying purchases made through either. This is Caveat's only source of revenue; there is no subscription.
What's stored, and where
On your device
Your anonymous install identifier, and a running tally of how much you've saved (used only to show your own savings milestones — never sent anywhere). Clearable any time from the extension's settings page.
On our server
A cache of past analyses, keyed by product listing (not by you) — refreshed every 30 days. Anonymous price observations, keyed by product listing, used to build each product's price history.
No tracking
No user analytics, no ad tracking, no third-party trackers of any kind.
Deleting your data
Open the extension's settings page and use "Delete local data" to clear your install identifier and savings tally from your device. To request server-side data deletion, email [email protected].
Changes to this policy
If this changes materially, the "Last updated" date above will change, and we'll note what changed here.