Privacy policy

ListSift privacy policy

Effective 1 November 2026

ListSift filters a collection only after you choose it. Local filters stay in your browser. Optional AI filtering sends limited selected text only after you opt in.

Data ListSift handles

Selected webpage content. ListSift reads visible text from the list, table, or simple card grid you choose. It excludes hidden text, editable content, and form values. Local word and number rules are processed on your device. The extension does not collect your browsing history or send the page URL or title to the hosted AI service.

AI requests. If you enter an AI criterion, explicitly allow AI data sharing, and click Filter page, ListSift sends the criterion, eligible selected item text, and opaque item IDs to the hosted AI service. Each item is limited to 1,800 characters and the criterion to 500 characters. AI transfer is optional.

Account and authentication data. Email sign-up uses Supabase Auth. Supabase stores your email, password credential, verification state, and account identifier. ListSift does not receive your plaintext password. The extension stores your Supabase session locally in Chrome storage until you sign out, clear local extension data, or the session is invalidated.

Service accounting. The hosted service stores your account identifier, remaining AI allowance, request hashes and statuses, reserved usage, and decision-only results needed for quota enforcement, replay protection, security, and cost controls. It does not store raw selected item text in the usage database. No installation ID, device fingerprint, hardware identifier, analytics identifier, or advertising identifier is collected.

Why this data is used

ListSift does not sell user data, use it for advertising, build advertising profiles, or collect product analytics.

Service providers

ProviderPurposeData involved
SupabaseAuthentication, database, and hosted AI gatewayEmail, account and session data, usage accounting, AI request traffic
Cloudflare Turnstile and PagesBot protection and hosting the sign-in/public pagesBrowser and network data needed by Cloudflare, including IP-related security signals
ResendTransactional verification and password-recovery emailEmail address and message delivery data
TypeSafe AI (Jev)Optional semantic classificationYour AI criterion and eligible selected item text

These providers may process operational request data under their own terms and privacy policies. TypeSafe states that customer input is not used to train or fine-tune its models. Zero-data-retention service is not claimed for this launch plan; provider retention terms apply.

Retention and deletion

Local drafts and page state last only while the selected page remains loaded. Your local sign-in session and AI-consent choice remain until you sign out, clear local extension data, remove the extension, or Chrome clears them. Successful decision results are scheduled to be removed after 24 hours. Request hashes, status tombstones, and account usage records may be retained longer to prevent replay and allowance abuse. Provider logs and backups follow provider retention schedules.

To request account deletion or ask a privacy question, email support@jaktplugg.se from the account address. We may retain minimal security, anti-abuse, transaction, or legal records where necessary and will explain any applicable limitation.

Security and user controls

Hosted user data is transmitted over HTTPS. The extension uses user-invoked page access, an exact hosted API origin, bundled code only, and Chrome storage restricted to trusted extension contexts. You can inspect selected item text before AI processing, leave AI consent off, sign out, use Clear local extension data, undo a filter, or remove the extension.

Chrome Web Store Limited Use

ListSift's use and transfer of information received from Google APIs and Chrome extension permissions complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. Data is used only to provide, maintain, secure, or support the extension's disclosed filtering function. Humans do not read selected webpage content except with specific user consent for support, when necessary for security, to comply with law, or after aggregation and anonymization for internal operations.

Changes and contact

Material changes will be posted on this page with a new effective date. Questions can be sent to support@jaktplugg.se.