Privacy Policy — BaitCatch
Where it runs. Only on YouTube, X (twitter.com and x.com) and Reddit, the sites listed in its permissions. It does nothing anywhere else, and you can switch any of the three off in the popup.
What we process. On those sites the extension reads the headlines in your feed: the title or text of each video or post, and the name of the channel, subreddit or author. It sends them to our server so they can be judged as clickbait, hype, outrage bait or none of these. If you list titles you want no spoilers for, a post that mentions one of them is sent together with your list, so it can be checked for spoilers. Titles written mostly in a non-Latin script, and titles under 15 characters, are not sent. The extension does not read your messages, your comments, your account, your watch or browsing history, or anything you type.
What our server does with it. Our server passes the headline text to TypeSafe AI, whose Jev model returns a probability for each kind of bait, and sends those numbers back to your browser. Our server does not keep the headline. It keeps the numbers for up to seven days, filed under a one-way fingerprint (a SHA-256 hash) of the headline, so that a video thousands of people see is judged once. It keeps no record of who saw which headline.
What TypeSafe AI does with it. TypeSafe AI processes the text on our behalf. Its privacy policy says: "We will not train or fine tune any artificial intelligence or machine learning models on your prompts or other Input." It uses the text to provide and debug its service and to prevent abuse, and keeps it for as long as it considers reasonably necessary; it does not publish a fixed period and we do not control it. TypeSafe's service is hosted in the United States. See https://typesafe.ai/legal/privacy-policy.
What we store about you.
- A random identifier created when you install the extension. It counts free-tier usage and holds your Pro licence. It is not linked to your name or email.
- A daily count of checks made from your network address, to stop abuse of the free tier. The count resets each day and records nothing about what was checked.
- Your settings, including your no-spoiler list, and a cache of results, kept in your own browser. Settings sync between your own Chrome profiles through your Google account if you use Chrome sync; we never receive them except as described above.
What we never collect. Your name, email, account details, watch history, browsing history, or the addresses of the pages you visit. The extension contains no analytics or advertising code.
What it never does. It never posts, likes, replies, follows, reports or blocks anything. It never removes anything from a page: a hidden item is covered, with a Show button.
Payments. Handled by Dodo Payments, our merchant of record. We receive a licence key and whether it is active. We never see your card details.
Who else handles data. Cloudflare (hosting our server, worldwide), TypeSafe AI (judging headlines, United States), Dodo Payments (payments). If you are in the UK or EU, this means headline text is transferred to the United States to be judged.
Your rights. Uninstalling the extension deletes everything on your device. Install records that stay unused for 90 days are deleted from our server automatically. To delete yours sooner, email support@codewithkolin.com.
Last updated: 2026-09-20