Comment Prospector for Facebook — Privacy Policy

Developer: 17tek | Last Updated: July 12, 2026 | Applies to: Comment Prospector for Facebook v1.0.0

Comment Prospector for Facebook is a local-first, no-backend browser extension. It is built so that your data stays on your own device. This policy explains exactly what the extension does and does not do with your information.

Summary

  • No backend, no accounts, no sign-in. The extension has no server of its own.
  • No telemetry, no analytics, no tracking, no ads. Nothing about your usage is collected or transmitted anywhere.
  • All data is stored locally in your browser’s IndexedDB and never leaves your device unless you explicitly export it or enable an optional network feature.
  • The only two features that can send data off your device are both off by default and each requires a separate, explicit permission grant (below).

What data the extension stores (locally only)

When you track a Facebook post, the extension reads the comments already visible to you on that page and stores, in your browser’s local database:

  • comment text, author display name, timestamps, and reply structure;
  • derived product “listings” (price, brand, condition, keywords, etc.);
  • image URLs referenced by comments;
  • your own workspaces, bookmarks, saved searches, and settings.

This data is stored only in your browser profile. It is not uploaded, shared, or synchronized to any server operated by the extension or its author.

The two optional network features

1. AI enrichment (off by default)

If — and only if — you add an AI provider in the settings, the extension can send selected comment text (and, for vision OCR, image bytes) to the provider endpoint you configured (e.g. your own OpenAI-compatible API, or a local Ollama / LM Studio server). This happens only for the enrichment jobs you request.

  • The extension requests host permission for one concrete provider origin at a time — never blanket “all sites” access.
  • Your API key is encrypted at rest with a non-extractable AES-GCM key and is excluded from every export and backup.
  • What that provider then does with the data is governed by that provider’s privacy policy, not this one. If you use a local provider, nothing leaves your machine.

2. Offline image caching (off by default)

If you enable offline image caching, the extension will fetch image bytes only from Facebook’s own image CDNs (*.fbcdn.net, *.cdninstagram.com) to store them locally for offline viewing and optional OCR. This requires a separate permission grant per CDN and fetches nothing else.

Permissions and why they are needed

PermissionWhy
storage, unlimitedStorageStore the local comment / listing database in your browser.
https://www.facebook.com/*Read comments on the Facebook post pages you choose to track.
offscreenRun search indexing / OCR off the service worker without a visible window.
scriptingInject the collection logic into the tracked Facebook page.
downloadsSave exports and backups to your computer when you ask.
alarmsResume an interrupted collection after the browser suspends the extension.
optional AI / CDN hostsOnly requested at the moment you enable AI enrichment or image caching, per specific host.

Data sharing and sale

The extension does not sell, rent, or share your data with anyone. There is no third party involved except an AI provider you choose to configure, and Facebook’s own servers (which you are already using).

Your control and data retention

  • Data persists locally until you delete it (per item, per post, or by clearing the extension’s storage / uninstalling).
  • Export and backup are always user-initiated.

Disclaimer

Not affiliated with, endorsed by, or sponsored by Meta. “Facebook” is a trademark of Meta Platforms, Inc.

Contact

Questions about this policy: [email protected]


← Back to Comment Prospector