Privacy Policy
Last updated: 5 October 2026
The short version
- •Your audio never leaves your device. All sound processing happens locally in your browser.
- •We store your email address and subscription status. That's essentially it.
- •Payment details are handled by Stripe and never touch our servers.
- •Our website uses advertising measurement (Google Tag Manager and the Reddit Pixel) to see whether our ads lead to sign-ups. The extension has no trackers, and we never sell your data.
- •The extension stores only a login token and your on/off preference, on your own device.
1. Introduction
This Privacy Policy explains what information the CalmEar Chrome extension and the CalmEar website (together, "CalmEar", "we", "us") collect, how we use it, and the choices you have. CalmEar detects and reduces triggering mouth sounds in your browser so you can watch videos comfortably.
This policy applies to the CalmEar browser extension and the website at calmear-app.com, including its dashboard and account features.
2. Your audio — processed locally, never uploaded
The core promise of CalmEar: the audio you listen to is processed entirely on your own device. CalmEar uses a machine-learning model that runs locally inside your browser to detect and reduce mouth sounds in real time.
- •We do not record, store, or capture your audio.
- •We do not upload, stream, or transmit any audio to our servers or any third party.
- •Audio analysis happens in memory, on your device, and is discarded immediately.
- •Because audio never leaves your device, it is not "personal data" that we process.
The extension requests permission to run on YouTube pages so that it can access the audio being played and filter it. It does not read page content, does not track which videos you watch, and does not report your browsing activity anywhere.
3. Data the browser extension stores
The extension stores the following in your browser's local storage (chrome.storage.local) on your device:
| Item | Purpose | Leaves your device? |
|---|---|---|
| Login token | Keeps you signed in to your CalmEar account | Sent only to calmear-app.com when checking your subscription |
| Subscription status cache | Remembers your plan so the extension works without constant network requests | No (local cached copy) |
| On/off preference | Remembers whether you have filtering enabled | No |
The extension communicates with calmear-app.com only to (1) sign you in, and (2) check whether your account has active access (your subscription or trial status). These requests contain only your login token — no audio, no browsing data, no video information.
4. Data we collect on the website
When you create a CalmEar account (required for the free trial and subscription), we collect:
- •Email address — provided by you during sign-up (directly, or via your Google account if you sign in with Google).
- •Account identifiers — an internal user ID and an authentication ID issued by our sign-in provider (Clerk).
- •Subscription state — trial dates, subscription status, and Stripe customer/subscription reference IDs.
- •Extension session records — a cryptographic hash of your extension login token (never the token itself), plus creation and expiry timestamps, so the extension can be signed in securely and sessions can be revoked.
When you visit calmear-app.com, our advertising measurement tags (loaded through Google Tag Manager) send information about your visit to Reddit: for example the pages you view on our website, technical details such as your browser, device and IP address, a cookie identifier, whether you created an account, and whether you subscribed (the plan and its price). Reddit uses this to tell us whether visitors coming from our Reddit ads sign up or subscribe. We do not send your email address or your CalmEar account details to Reddit.
We do not collect your name (beyond what your email or Google account provides), address, phone number, browsing history outside our website, watch history, or any content from the pages you visit.
5. Payment data
Payments for CalmEar Premium are processed by Stripe, Inc. When you subscribe, you enter your payment details (card number, expiry, security code) directly into Stripe's secure checkout. These details never reach CalmEar's servers and we never see, store, or have access to your full card number.
We receive from Stripe only what is needed to operate your subscription: a customer reference ID, subscription status, renewal date, and confirmation of payment. You can review Stripe's own privacy practices at stripe.com/privacy.
6. Third-party services
CalmEar relies on the following service providers:
| Provider | Role | What they receive |
|---|---|---|
| Clerk | Sign-in and authentication | Your email address (and Google account identifiers if you sign in with Google) |
| Stripe | Payment processing | Your payment details and billing information (entered directly with Stripe) |
| Supabase | Database hosting (EU region) | The account records described in Section 4 |
| Google (Tag Manager) | Loads our advertising measurement tags on the website | Technical data needed to load the tags, such as your IP address and browser details |
| Advertising measurement (Reddit Pixel) on the website | Information about your visit to calmear-app.com and whether you signed up or subscribed, as described in Section 4 |
Each provider processes data under its own privacy policy and applicable data-processing agreements. Clerk, Stripe and Supabase are used solely to operate CalmEar. Google and Reddit process website visit data under their own terms; see Google's privacy policy and Reddit's privacy policy. None of them receive any audio, and the extension sends nothing to Google or Reddit.
7. How we use your data
We use the limited data we hold only to:
- •Provide the CalmEar service — verify that your account has access to the extension's filtering features.
- •Manage your free trial and subscription.
- •Let you sign in securely and connect the extension to your account.
- •Measure whether our advertising leads to sign-ups and subscriptions (website only, see Section 4).
- •Respond to support requests you send us.
- •Meet legal obligations (for example, accounting records for payments).
8. What we do not do
- ✕Sell or rent your personal data, or share your email address or account details with advertisers.
- ✕Put trackers in the extension. Advertising measurement runs only on our website (see Section 4).
- ✕Track what you watch. The extension never reports the pages you visit or videos you play.
- ✕Collect or upload audio. All audio processing is local to your device.
- ✕Build a profile of you. We only keep what is needed to run your account.
9. Data retention and deletion
We keep your account data for as long as your account exists. Extension login tokens are stored only as one-way hashes and expire automatically after one year; you can revoke them at any time by signing out from the extension or your dashboard.
You can request deletion of your account and all associated data at any time by emailing us at ericmrleliko@gmail.com. We will delete your records from our systems within 30 days, except where we are required to keep limited records for legal or accounting purposes (for example, Stripe payment records).
10. Security
We protect your data with industry-standard measures: authentication is handled by Clerk, payment data never touches our servers (Stripe), extension login tokens are stored only as SHA-256 hashes (so even our database never contains your actual token), and all communication between the extension, the website, and our API uses HTTPS. No system is perfectly secure, but we have designed CalmEar so that the most sensitive thing you have — the audio you listen to — simply never leaves your device.
11. Your rights (GDPR)
If you are in the European Economic Area, you have the right to:
- •Access the personal data we hold about you.
- •Correct inaccurate data (you can update your email in your account profile).
- •Delete your account and data (see Section 9).
- •Object to or restrict processing of your data.
- •Portability — receive a copy of your data in a machine-readable format.
- •Lodge a complaint with your local data protection authority.
The legal basis for processing your account data is the performance of our contract with you (providing the CalmEar service). You can block these tags with your browser's privacy settings or a content blocker. To exercise any of these rights, email ericmrleliko@gmail.com.
12. Children's privacy
CalmEar is not directed at children under 16, and we do not knowingly collect personal data from children under 16. If you believe a child has provided us personal data, please contact us and we will delete it.
13. Changes to this policy
If we make material changes to this policy, we will update the "Last updated" date above and, where appropriate, notify you by email or a notice on the website. Continued use of CalmEar after changes take effect constitutes acceptance of the updated policy.
14. Contact
Questions about this policy or your data? Email us at ericmrleliko@gmail.com.