Privacy policy

The short version. To rewrite a comment, Warden sends that comment's text to DeepSeek, an AI provider in China. We do not store the comments we judge. We keep your email address, a count of how many rewrites you have used today, and your subscription status. We do not sell data to anyone, and we do not use your comments to train anything.

1. Who we are

Warden is run by [YOUR FULL NAME], an individual sole trader based in [TOWN/CITY, United Kingdom]. There is no company — Warden is a one-person project, and the person responsible for your data is a person rather than an organisation.

For the purposes of UK data protection law I am the data controller for the personal data described here.

Contact, including for any request about your data: wardensuite@gmail.com. If you need a postal address — for a formal data protection request, or to exercise a legal right — email me and I will provide one.

Payments are taken by Paddle, who act as the seller of record. Their details appear on your receipt and they are a separate data controller for the billing information you give them.

2. What we collect, and why

Data	Why	Lawful basis
Email address	To create your account, sign you in, and contact you about the service	Performance of a contract
Password	To sign you in. Stored only as a salted hash by our auth provider — we never see or store the password itself	Performance of a contract
Daily usage count	To enforce the limit on your plan. A number per day, nothing about what the messages said	Performance of a contract
Subscription status	To know which plan you are on. Recorded from Paddle when you subscribe, change or cancel	Performance of a contract; legal obligation (tax records)
Comment text you browse past	To judge and rewrite it. Held in memory for the moments it takes to process. See section 3	Performance of a contract

We do not collect your browsing history, the pages you visit, your IP address for analytics purposes, or any images from the pages you read. There is no analytics or advertising tracking on this website.

3. Comment text — the important part

The extension reads the visible comment text on pages you browse. Most of it is discarded immediately by a filter that runs before any judgement is made. What remains is sent to our service, and from there to DeepSeek for judging and rewriting.

We do not keep it. Comment text is not written to any database of ours.
It is held briefly in memory. Rewrites are cached in server memory so the same comment is not judged twice while you scroll. That cache is lost whenever the server restarts and is never written to permanent storage.
It is not in our logs. Our diagnostic logs identify a message by a short hash, never by its text.
It is not used for training. Neither by us, nor — under our agreement with them — by our AI provider on data sent via their API.

You should still treat this as data leaving your device. If a comment contains personal information about you or someone else, that text is transmitted as part of judging it. Warden is not suitable for use on confidential material.

4. International transfers

DeepSeek processes data in China, which is outside the UK and EEA and is not covered by a UK adequacy decision. That means the comment text Warden judges is transferred to a country whose data protection regime the UK has not assessed as equivalent.

This transfer relies on [TRANSFER MECHANISM — see the note below before publishing].

I am telling you this plainly rather than burying it, because it is the single most significant thing about how Warden handles your data. If you would rather your text were not sent outside the UK, do not use Warden — there is no configuration in which the judging happens on your own machine.

5. Who processes data on our behalf

Our subprocessors, what each one handles, and where, are listed on the subprocessors page. We will update that page before adding a new one.

6. How long we keep things

Account details — until you delete your account, then removed within 30 days.
Daily usage counts — 90 days, then deleted automatically.
Billing records — retained by Paddle as merchant of record for as long as tax law requires, typically six years.
Comment text — not retained. See section 3.

7. Cookies and local storage

This website sets no advertising or analytics cookies. It stores your sign-in session in your browser's local storage, which is strictly necessary to keep you signed in — without it you would have to sign in on every page. The browser extension stores your settings and your session locally on your own device.

8. Your rights

Under UK GDPR you can ask us to:

give you a copy of the personal data we hold about you;
correct anything inaccurate;
delete your account and the data attached to it;
restrict or object to how we use it;
provide it in a portable format.

Email wardensuite@gmail.com and we will respond within one month. If you are unhappy with how we have handled it, you can complain to the Information Commissioner's Office at ico.org.uk.

9. Security

Traffic is encrypted in transit. Passwords are hashed by our auth provider and never stored by us. Access to production credentials is limited to the operator of the service. No system is perfectly secure, and we will tell affected users and the ICO about any breach that requires it, within the timescales the law sets.

10. Children

Warden is not intended for children under 13, and we do not knowingly create accounts for them.

11. Changes

If we change this policy we will update the date at the top. If a change materially affects how your data is handled, we will email you before it takes effect.