Privacy policy
Version 1.0 · Last updated 4 September 2026
BaitBlocker sends nothing anywhere. The extension reads pages inside your browser and nothing it reads ever reaches us, because it never leaves your machine. This website sets no cookies and runs no analytics.
This policy sets that out in the detail the UK GDPR and the EU GDPR require, including the small amount of data that any website unavoidably processes in order to be reachable at all.
Who is responsible
The controller for the processing described below is Amr Aswad, an individual developer based in the United Kingdom.
Contact for anything in this policy, including any request about your rights: [email protected].
There is no Data Protection Officer, and one is not required at this scale.
The extension
What it reads
To mark persuasion patterns, BaitBlocker reads the visible text of pages you open. That reading happens inside the page, in your browser. The text is never transmitted, never written to disk, and never seen by us or anyone else. When you close a tab, the extension's record of that page is gone.
The extension makes no network requests of any kind. The rules, the explanations and the fonts are all bundled inside the installed package. There is no server to send anything to.
What it stores, and where
- Your settings — which categories are switched on, the sensitivity level, and the list of sites you have paused. Held in your browser's extension storage.
- A running tally — how many pages have been scanned and how many patterns were marked, split by category. Counters only: no URLs, no page text, no page titles, no timestamps of individual visits.
Both live in your browser and are readable only by this extension. If you have your browser's own sync feature switched on, your browser may replicate your settings between your devices using your browser vendor's infrastructure. That is processing carried out by your browser vendor, under your own account and their privacy policy, not by us — we receive nothing from it. Uninstalling the extension removes all of it.
What this means for your rights
We hold no personal data from the extension. There is no account, no identifier, no profile, no server-side record. A request to access, correct, export or erase extension data has nothing for us to act on, because we have never received any. You can see all of it yourself on the extension's Settings page, and delete all of it by removing the extension.
This website
No cookies, no analytics, no third parties
baitblocker.org sets no cookies, uses no analytics or tracking of any kind, and loads no resources from third-party servers. Typefaces are served from this site rather than from a font provider, so no request carrying your IP address goes to anyone else. This is why you were not asked to accept anything when you arrived: there is nothing to consent to.
Server logs
The site is hosted on Cloudflare Pages. Like any web server, it processes technical request data in order to serve pages and to resist attack and abuse. That data includes your IP address, the time of the request, the page requested, and your browser's user-agent string. An IP address can be personal data, so it is covered here.
| Purpose | Legal basis | Retention |
|---|---|---|
| Delivering the pages you request, and keeping the site available and secure | Legitimate interests, Article 6(1)(f) — operating and protecting a website. Our interest in a functioning, non-abused site is not outweighed by your interests, given the data is technical, short-lived, and never used to identify or profile you. | Held by Cloudflare under their own log retention, in the order of days. We do not extract, download, analyse or keep copies of these logs. |
We never combine this data with anything else, never use it to build a profile, and never sell or share it. There is no automated decision-making and no profiling in the sense of Article 22.
Processors and international transfers
Cloudflare, Inc. acts as our processor for hosting and delivery, under Cloudflare's data processing addendum. Cloudflare operates a global network, so request data may be handled outside the UK and EEA, including in the United States. Those transfers rely on the UK International Data Transfer Addendum and the European Commission's Standard Contractual Clauses, together with Cloudflare's technical and organisational measures.
The domain is registered through Cloudflare Registrar. No other processor is involved, because there is nothing else to process.
Your rights
Under the UK GDPR and the EU GDPR you have the right to:
- Access the personal data we hold about you
- Rectify it if it is inaccurate
- Erase it
- Restrict how it is processed
- Object to processing carried out on the basis of legitimate interests, which includes the server logs described above
- Portability — receive data you provided in a machine-readable form, where that right applies
Exercise any of them by emailing [email protected]. We respond within one month, and there is no charge.
Be clear-eyed about what these rights can reach here. We hold nothing that identifies you. Server logs sit with our host, are not indexed by identity, and are deleted on their own schedule, so finding "your" entries in them is unlikely to be technically possible. We would rather say that plainly than imply a capability we do not have.
Complaints
If you think we have handled your data badly, please tell us first. You also have the right to complain to a supervisory authority. In the UK that is the Information Commissioner's Office, ico.org.uk/make-a-complaint. In the EEA it is the data protection authority for the country where you live or work.
Children
BaitBlocker is not directed at children and collects nothing from anyone, of any age.
Changes to this policy
If this policy changes, the version number and date at the top change with it. Material changes will also be noted in the extension's release notes, and previous versions are available on request.