Privacy policy

What stays on your device

You don't need an account to pull or export comments. Threads, profiles, videos and reviews you pull, your last result, your History and your export settings are stored in your browser (Chrome or Edge local storage and IndexedDB), along with a cached copy of your account status and the random IDs used for usage analytics. They are not sent to us, and we keep no copy on our servers. Uninstalling the extension deletes them.

Your account

Accounts are optional. If you sign in with Google or with an email and password, Google Firebase Authentication stores your email address and, if you use Google, the name and profile photo Google shares with it. We also keep a user record in Firebase with your user ID, your email address and when the account was created, so we can sign you in. We keep this until you ask us to delete your account.

Usage analytics

We record usage events such as "pull finished" or "CSV exported", with counts and fixed labels only, using PostHog. Events never include comment or review text, thread or video titles, usernames, channels, companies, search words, subreddits or URLs. Before you sign in, events carry only a random ID. After you sign in, they are linked to your account ID, so we can see how accounts use Threadpull; signing out starts a new random ID. We ask PostHog not to look up your location from your IP address.

Reddit, Hacker News, YouTube, Trustpilot and AI chats

Threadpull reads Reddit through the Reddit tab you have open, only when you click Pull. If Reddit asks you to prove you're human, you complete the check yourself; Threadpull never gets around it. Threadpull is not affiliated with Reddit.

For Hacker News threads, Threadpull reads the comments from Hacker News's public API (hacker-news.firebaseio.com), only when you click Pull. These requests carry no cookies or account details. Threadpull is not affiliated with Hacker News or Y Combinator.

For YouTube videos, Threadpull reads the video and its comments through the YouTube tab you have open, one request at a time, the way YouTube loads them. It needs your OK to read youtube.com: Chrome asks the first time you pull a video, so if you never pull one, you're never asked. Once you've said yes, opening the side panel on a video also reads its comment count, so the panel can show it before you pull. Threadpull reads the video's title, channel, description, upload date and views, and its comments and replies, and nothing else on youtube.com. The requests run in your tab, so YouTube sees them as your browser's own, signed in if you are. If YouTube asks you to sign in or to choose your cookie settings, you do that yourself; Threadpull never gets around it. Threadpull is not affiliated with YouTube or Google.

For Trustpilot, Threadpull reads a company's reviews through the Trustpilot tab you have open, one request at a time with a pause between them, the way Trustpilot loads them. It needs your OK to read trustpilot.com: Chrome asks the first time you pull a company's reviews, so if you never pull any, you're never asked. Once you've said yes, opening the side panel on a company's reviews also reads their first page, so the panel can show the company, the view and the review count before you pull. Threadpull reads the company's name, website, TrustScore and review counts, and the reviews in the view you chose (each reviewer's name and country, the stars, title, text and dates) with the company's replies, and nothing else on trustpilot.com. The requests run in your tab, so Trustpilot sees them as your browser's own, signed in if you are. If Trustpilot asks you to sign in or to prove you're human, you do that yourself; Threadpull never gets around it. Threadpull is not affiliated with Trustpilot.

Send to AI opens ChatGPT or Claude and places the text in the chat box. To do that, it briefly saves the prompt in your browser and deletes it once the chat box is filled; a saved prompt older than 30 seconds is never used. Nothing is sent until you press send there, and their own privacy policies apply.

Your rights

You can ask for a copy of the account data we hold, or for it to be deleted, by emailing us. We respond within 30 days.

Changes to this policy

If we change this policy, we'll update the date at the top of this page.

Contact

Questions or a deletion request? Email us at hello@promptvault.shop and we'll take care of it.