Privacy Policy — HeyReply

Last updated: April 29, 2026

Overview

HeyReply is a Chrome extension that helps you understand and reply to Reddit discussions by translating threads and drafting replies using AI. This privacy policy explains how we handle your data.

Bottom line: We do not store your content. We do not track you. We do not sell your data.

What Data We Access

When you use HeyReply, the extension reads:

• Reddit post text — the post body you are viewing
• Reddit comment text — the comment you select

We strip and discard before sending to our servers:

• Usernames (replaced with [user])
• Subreddit names (replaced with [subreddit])
• URLs and links (replaced with [link])
• User IDs and metadata

We never read: your Reddit username, browsing history, DMs, saved posts, or any other personal data.

Where Your Data Goes

After stripping identifiers, the cleaned text is sent to:

1. Our Cloudflare Worker (reddit-assist.borchello.workers.dev) — acts as a proxy for request validation and rate limiting
2. Anthropic Claude API (api.anthropic.com) — processes the text for translation or reply generation

Both services receive only the cleaned text (no Reddit identifiers). Neither service stores your requests or uses them for training.

Data Storage

On your device (browser):

• Your language preference (e.g., Russian, English)
• Your tone preference (e.g., Friendly, Neutral)
• Your theme preference (Light/Dark)
• Custom system prompts you create (stored locally, never sent unless you use them)

All stored via chrome.storage.sync — encrypted by Chrome, synced only to your Google account if you enable sync.

On our servers: We do not store your translations, replies, or any content you submit. Each request is processed once and discarded.

How We Use Your Data

We use the text you submit only to fulfill your request:

• Translate it to your chosen language
• Generate a reply in your chosen tone

We do not:

• Use your data for machine learning or model training
• Use your data for advertising or profiling
• Sell or share your data with third parties
• Store your data after the request completes

Rate Limiting and Budget

To prevent abuse and manage costs, our Cloudflare Worker enforces:

• Per-IP rate limit: 30 requests per 5 minutes
• Daily budget cap: $5/day (this protects against runaway costs; once hit, requests return a "try again tomorrow" error)

These are technical safeguards, not quotas on your usage. If you hit the budget, it resets daily at midnight UTC.

Security

• All communication between extension ↔ Worker ↔ Anthropic uses HTTPS
• Requests are validated by shared secret (thin spam filter)
• Your API requests are anonymized by request origin IP

Third-Party Services

Cloudflare Workers:

• Hosts our backend proxy
• Performs rate limiting and budget checks
• Cloudflare's privacy policy

Anthropic:

• Provides Claude AI for translation and reply generation
• Uses zero-retention API (your requests are not stored or used for training)
• Anthropic's privacy policy

Limited Use Compliance

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Specifically:

• We collect Reddit website content only to fulfill translation and reply generation
• We do not use this data for personalized ads, credit decisions, lending, or other secondary purposes
• We do not transfer data to third parties except as required to provide the service (Anthropic)
• We certify that we do not sell or transfer user data

Data Deletion

When you uninstall HeyReply:

• All local preferences (chrome.storage) are deleted by Chrome
• We have no record of your requests to delete (they were never stored)

To delete local preferences manually:

1. Open Chrome Extensions (chrome://extensions/)
2. Find HeyReply → Details
3. Click "Clear data"

Changes to This Policy

We may update this policy occasionally to reflect changes in our service or legal requirements. We will update the "Last updated" date above. Continued use of HeyReply after such updates constitutes acceptance.

Contact

If you have questions about this privacy policy or your data, contact us at borchello@gmail.com.