Everything. The receipt calculation, the tracker database lookup, and the value formula all execute as JavaScript inside your browser tab. No data is sent to any server at any point during receipt generation.

One file: trackers.json — a 3 MB database of 38,000+ tracker domains, served from tunnelmind.ai (Cloudflare Pages). This file contains no user data. It is the reference database used to identify surveillance companies. It is cached by your browser after the first visit and not re-downloaded unless updated.

One entry in localStorage: a receipt count and expiry timestamp. This is used to enforce the free tier limit (3 receipts per 7 days). It contains no URLs, no domains, no browsing history, and no personal information. It never leaves your device. You can clear it any time by clearing your browser's site data for tunnelmind.ai.

The browser history or domain list you upload or paste. Your receipt results. What surveillance companies appeared. The dollar values calculated. None of this is transmitted — it exists only in your browser's memory while the tab is open.

Domain names (hostnames only — no paths, no query strings, no URLs) and a session start timestamp. Stored in chrome.storage.local (or the Firefox/Safari equivalent), which is local to your browser and device. The extension never transmits this data anywhere.

Page content. Passwords. Form inputs. Cookies. Full URLs (only the hostname is extracted). The extension uses the webNavigation permission solely to observe which hostnames your browser contacts — the same information any network observer on your local network could see.

trackers.json is bundled inside the extension package. No network request is made to look up tracker information. Receipt generation is fully offline after installation.

Click "Clear Session" in the extension popup at any time. This removes all stored domain data from chrome.storage.local. Uninstalling the extension removes all stored data automatically.

All fonts are self-hosted on tunnelmind.ai. No requests are made to Google Fonts, Adobe Fonts, or any third-party font CDN on any page of this site.

None. No Google Analytics, no Mixpanel, no Hotjar, no pixel tracking of any kind on any page of tunnelmind.ai.

tunnelmind.ai is hosted on Cloudflare Pages. Cloudflare processes web requests as part of serving the site and may log IP addresses and request metadata per their own privacy policy. TunnelMind does not receive or store individual visitor logs.

Subscription payments are processed by Stripe. TunnelMind does not store credit card numbers or payment details. Stripe's privacy policy governs how payment data is handled. Your email address is shared with Stripe to process your subscription and send receipts.

If we ever add analytics, change data handling, or introduce any form of data collection, this page will be updated and the effective date will change. The core commitment — that receipt generation runs locally with no server involvement — will never change without building a completely different product.