Privacy Policy — Moje Reality
Last updated: 2026-05-08
This extension was built with privacy as a primary design goal. It collects only what is strictly required to deliver its features, and it never sells, shares, or monetises any user data.
What is stored locally on your device
The following information is stored in your browser's local extension storage
(chrome.storage.local) and never leaves your device:
| Data | Purpose |
|---|---|
| Identifiers of listings you have hidden | So hidden listings stay hidden after reload |
| Identifiers of listings you have liked | So your "liked" state shows immediately, before the server replies |
| Your private notes about listings | So your notes show next time you visit |
Deleting the extension or clearing extension storage erases all of this.
What is sent to our server (likes feature)
To make the "like count" of a listing visible to other users of the extension, the following minimal data is transmitted to our backend:
| Data | What is actually sent |
|---|---|
| Listing identifier | A SHA-256 hash of the listing path. The original URL is never sent. The server cannot reverse the hash to learn the original listing. |
| User identifier | A one-way HMAC-SHA256 hash combining your IP address and a few standard browser headers (User-Agent, Accept-Language, Accept-Encoding, Sec-CH-UA, Sec-CH-UA-Platform). The raw IP and headers are never stored — only the resulting hash. |
We do not send to the server:
- The original listing URL or any text content from listings
- The host website name,
Origin, orReferer - Your private notes (they stay strictly local)
- Any cookies, login state, or browser identifier set by the host site
- Any analytics, telemetry, click tracking, or page-view data
Why we hash everything
The combination of one-way hashes means that even if the server's database were leaked, an attacker could not recover:
- Which listings you liked (without already knowing the listing URL)
- Your IP address or browser identifying details
The hashing keys (a server-side secret salt) are required to produce these hashes, so the database is meaningless on its own.
How long is data retained
- Local data: until you remove it or uninstall the extension.
- Server data: like records persist indefinitely so that counts remain consistent. There is no per-user account to delete because no per-user account exists; identifiers are derived, not stored as profiles.
Third parties
- No analytics services (no Google Analytics, no Mixpanel, no Sentry, etc.)
- No advertising networks
- No data brokers
- No third-party SDKs are bundled inside the extension
The only network traffic the extension generates is to its own backend.
Permissions used
| Permission | Why |
|---|---|
storage |
To save your hidden-listings, liked-listings, and private notes locally. |
host_permissions for the supported real-estate website |
So the extension can inject its UI controls (hide button, like button, note input) into the listing pages. |
host_permissions for our likes server |
So the extension's background service worker can fetch and update like counts. |
The extension does not request permissions for: tabs, history, cookies, webRequest, downloads, identity, geolocation, scripting (it uses content scripts declared in the manifest), notifications, or any other API beyond those listed above.
Children
The extension is not intended for, and is not knowingly used by, children under 13. No data that would identify a child is collected.
Contact
For privacy questions, please open an issue on the project repository or contact the developer at the email listed on the Chrome Web Store listing.