Check our privacy claims yourself
You do not have to take our word for it. Below are three checks anyone can run: prove the Hunch extension sends nothing, prove the website checker still works with your internet off, and read exactly what each surface keeps, copied unchanged from our privacy policy.
Prove the extension sends nothing
The extension checks pages on your computer. Here is how to watch for yourself that nothing leaves your browser.
- Open Gmail, or any site, in Chrome with the Hunch extension turned on.
- Press F12, or right-click and choose Inspect, to open DevTools, then click the Network tab.
- Click the clear button in the Network tab, then use Hunch as usual and let it scan the page.
- Watch the Network list. You will see no request to any Hunch server: nothing to checkyourhunch.com and no API call. Since version 3.8.13 the extension is pure-local, with no network calls, no host permissions, and a content-security policy that allows connect-src of self only.
- For proof it cannot reach out at all, open chrome://extensions, click Details on Hunch, and confirm it asks for no site access and no host permissions.
Prove the website checker works offline
If the checker needs no server, it keeps working with your internet switched off. Try it.
- Open checkyourhunch.com/check in your browser and let the page finish loading.
- Turn off your Wi-Fi, or switch on airplane mode, so the computer has no internet.
- Paste any suspicious message into the box and run the check.
- It still works and gives the same verdict. The check runs in your browser, so with no connection there is nowhere for your message to go.
Exactly what each surface keeps
These are the same facts as our privacy policy, copied here unchanged. We have not added a new claim. Where a message goes, and what we keep:
| Where | What happens to the message | What we keep, and for how long |
|---|---|---|
| Chrome extension | Checked on your computer. Nothing is sent to us. | Your settings and simple counts, stored only in your browser. |
| Website checker | Checked in your browser. Nothing is sent to us. | A page-view count per page per day, with no cookies, no IP address, and no personal data. The counts are sampled, so they are approximate, and we keep them about 400 days. |
| Telegram bot | Sent to our server, checked, then deleted. Nothing is kept between messages. | Aggregate counts only, which organizations get asked about and whether a result was marked helpful, with no message content and no user id, kept about 400 days. A same-day fair-use counter tied to a one-way code of your Telegram id resets every day. Telegram itself handles your chat under its own policy. |
| Email check (check@checkyourhunch.com) | Sent to our server, checked, then deleted. Our reply repeats your subject line so it lands in the same thread. It never repeats your message. | A one-way code (salted hash) of the sender address, for up to 24 hours, only to prevent abuse, plus a one-way fingerprint of the email ID (never the sender, never the content) for up to 7 days so we never reply twice. Our email providers (Cloudflare for inbound routing, Resend for the reply) keep a technical delivery log under their own policies. |
| AI assistants (MCP) | Sent to our server, checked, then deleted. | A daily usage count and a per-IP rate-limit counter, kept up to 24 hours. The IP is stored only as a one-way salted hash, never in the clear. |
Read the full policy: Privacy Policy.