LessRagePrivacy, in plain words.
Effective September 23, 2026 · LessRage public beta
What the extension sends
After you agree to cloud filtering and grant site access, LessRage reads supported Reddit posts and X tweets near your viewport. It sends up to 2,000 characters of post text and up to 600 characters of available quoted context, a post identifier, and the platform label over HTTPS to our AWS service. Our service sends the text and context to TypeSafe’s Jev for classification.
LessRage does not intentionally read or transmit DMs, drafts, cookies, passwords from the supported feeds, or your complete browsing history. It does not analyze image pixels or video. Text visible in a feed can contain personal information supplied by the post’s author. Do not use the demo to submit confidential information.
What the live demo sends
The demo automatically submits seven fictional example posts when it enters view. “Watch again” reuses those judgments. “Check this post” submits the text you type or paste. These actions send text to the same AWS and TypeSafe services. The website does not automatically submit custom text while you type.
What we store
- On your device: extension preferences and consent, a random installation identifier, a temporary access token, the latest daily usage snapshot, and a bounded cache of text fingerprints and judgments. Original post text is not saved in the extension’s persistent cache. The website saves a random demo identifier in local storage, keeps its access token in memory, and caches only the fictional examples’ judgments in session storage for 15 minutes to avoid repeated requests on reload.
- In AWS: text fingerprints and category judgments for up to 24 hours of application use; anonymous installation counters, daily changing hashed network-address counters, and shared usage counters. Judgments are shared across installations when text, context, model, and filtering rules match. These records expire after roughly one or two days. DynamoDB’s background deletion can take additional days after expiration.
- Operational logs: error codes, AWS request identifiers, and service-level metrics. CloudWatch logs are retained for seven days. Application logging excludes raw post text and API credentials; CloudFront and API Gateway request access logging are disabled in this beta.
Network services necessarily process IP addresses when handling requests. We use a keyed, daily changing fingerprint for abuse limits rather than saving raw IP addresses in the application database. Public endpoints have rate and usage limits.
TypeSafe’s processing
TypeSafe provides the model that evaluates text. Its documentation states that Jev is not trained on customer requests or responses. That statement does not mean requests have zero retention. We have not enabled or claimed an enterprise zero-data-retention agreement for this beta. See TypeSafe’s model documentation and TypeSafe’s privacy policy.
Your controls
Pause filtering from the extension popup at any time. Choose Collapse to retain reveal buttons or Completely hide to remove filtered cards. The on-page “Show all” control restores filtered content in that tab. These controls change what you see; they never delete posts from Reddit or X.
Turn filtering off with the switch in the popup. Use Chrome’s extension settings to revoke Reddit/X access. Sign out under Account & settings to remove saved sign-in tokens. Removing the extension removes its local storage, including cached judgments, preferences, and installation identifiers. Clear this website’s site data in Chrome to remove its demo identifier. Short-lived classification caches expire automatically. Signed-in usage is linked to your account identifier. Pausing or uninstalling does not delete a cloud account or cancel a subscription; use Manage billing to cancel, and contact charles@acornbids.com for account deletion.
Accounts, payments, and service analytics
Accounts are optional. Our custom sign-in, account confirmation, and password-reset forms send the values you submit over HTTPS to the LessRage service and Amazon Cognito. Passwords and confirmation codes are not stored in application logs or the LessRage database. Amazon Cognito stores your email, verified-email status, and sign-in information in a separate LessRage user pool. We store an account identifier, creation date, Stripe customer/subscription identifiers, and paid-access status in AWS. Account usage limits are shared across devices. Sign-in tokens are stored in trusted extension storage or this website’s session storage; sign out to remove the local tokens. Extension sign-in uses a single-use code bound to your login attempt. Its encrypted temporary token payload expires after two minutes and is removed on successful redemption; expired records are subsequently deleted by DynamoDB.
Stripe handles payment details, recurring billing, and billing receipts. Our application does not receive or store full payment-card numbers. The payment account’s merchant is AcornBids, Inc. Account and billing records remain while the account exists, subject to applicable payment-record retention requirements.
Our private dashboard records download-link requests, first activated installations, daily active installations and accounts, signups, upgrade prompt views and clicks, checkout starts, aggregate cache use, and model token totals. Activity deduplication uses account identifiers or hashed installation identifiers, not raw post text, post links, category scores, or a browsing history. Daily activity markers expire after 35 days; first-activation markers and aggregate daily counts are retained to measure service adoption. Counting begins when you activate cloud filtering or use account/billing features. A download-link request is counted when that link is used.
No advertising profile
LessRage has no advertising tracker or third-party analytics script. We do not sell browsing data or use it for targeted advertising. AWS hosts this service in the United States; TypeSafe processes submitted text under its own service terms.
LessRage’s use and transfer of information received from Google APIs follows the Chrome Web Store User Data Policy, including its Limited Use requirements.
About this beta
Automated judgments can be wrong. This is a personal feed preference tool, not a guarantee that unwanted material will never appear. Platform layout changes, missing context, unsupported media, outages, and quota limits can leave posts unfiltered. Text that cannot be checked remains visible.
The current download is a manually installed Chrome beta, not a Chrome Web Store listing. Material changes to processing will be reflected in this policy and, where needed, a new consent step.