Privacy Policy

Last updated: April 2026 · Version 1.0

Who we are

Kibbo is a browser extension designed to protect consumers from dark patterns, inflated prices, and abusive clauses during their online shopping. We are a security and information tool, not a store or financial service.

For any privacy-related enquiry, you can contact us at: Hello@getkibbo.com

Data we collect (and what we DON'T)

We do not collect:

• Your browsing history
• The websites you visit
• Passwords, banking data, or payment information
• Conversations or content from your chats
• Personally identifiable information without your consent

We only collect your email if you provide it to us voluntarily through the waiting list form (managed by Tally.so). This email is used exclusively to send you Kibbo updates.

Locally processed data

The following information is processed exclusively on your device and is never sent to our servers:

• Prices detected on product pages (Spectrometer history)
• Trap counters detected per domain (for the Ranking)
• Personal settings (whitelist, ignored phrases)
• SHA-256 Snapshot captures (saved only in your browser)

All this data is stored in chrome.storage.local, the local storage of your Chrome extension, and only you can access it.

Data sent to external services

All dark pattern analysis is performed locally in your browser. Kibbo never records your browsing history, passwords, or payment data.

Certified Snapshot — When you generate a Certified Snapshot, Kibbo makes these external calls to complete the document:

• Queries your public IP via api.ipify.org (free third-party service)
• Retrieves the official timestamp via worldtimeapi.org or timeapi.io as a fallback

This data is included solely in the downloadable document saved on your device. It is not stored on any Kibbo server. If you use a VPN, the recorded IP will correspond to the VPN server, not your actual location.

Artificial Intelligence Features

Some Kibbo features use Artificial Intelligence to analyze public texts: the phishing detector (text manually pasted by the user), the T&C analyzer, and the returns policy detector.

How data submission works: Calls to the Anthropic API are not made directly from your browser. Kibbo uses its own proxy server hosted on Cloudflare Workers that acts as an intermediary. Your browser never contacts Anthropic's servers directly — it only contacts Kibbo's proxy, which handles communication securely without exposing any API key to the client.

Never sent: credentials, payment data, personal information, or identifying data. These features are only activated when the user explicitly requests them.

Data sharing

• We do not sell your data to third parties
• We do not rent or transfer your personal information
• We do not show personalized advertising
• We do not share data with advertisers

The only external service that receives your email is Substack (mailing list at getkibbo.substack.com), subject to its own privacy policy. You can cancel your subscription at any time directly from Substack.

Chrome Extension — Permissions and data use

Kibbo requests the following permissions in your Chrome browser. Below we explain exactly what each one is used for:

• storage — We save your preferences (enabled/disabled, ignored phrases, price history) exclusively in your local browser. Never sent to external servers.
• tabs — We read the URL and title of the active tab to detect which store you're on and show relevant information in the popup.
• activeTab — Needed to connect the popup with the script that analyzes the active page in real time.
• contextMenus — We add options to the right-click menu to dismiss alerts and report traps.
• cookies — We read only first-party cookies to detect session manipulation such as resetting counters. We do not store or transmit cookies.
• clipboardWrite — Allows the user to copy abusive T&C clauses to the clipboard with one click, for use in consumer complaints.

Kibbo does not sell, share, or transmit any browsing data to third parties. All processing occurs locally in your browser.

For more information about the privacy policy in the context of Chrome extensions, see the Chrome Web Store program policies.

Your rights

You have the right to:

• Access the data we hold about you
• Request the deletion of your email at any time
• Object to the processing of your data
• Delete all local data by uninstalling the extension

To exercise any of these rights, write to us at Hello@getkibbo.com and we will respond within a maximum of 30 days.

Changes to this policy

We may update this Privacy Policy occasionally. When we do, we will update the "Last updated" date at the top. We recommend reviewing it periodically.