Clean Social is designed to work locally in the browser. The extension does not collect, transmit, sell, or share raw webpage DOM, page titles, full URLs, cookies, browsing history, screenshots, messages, usernames, social account identifiers, passwords, or social authentication credentials.

The extension stores local settings in browser storage, including enabled protections, the kill switch state, and optional .example validation domains. Current-page decisions are stored locally only as coarse decision/status values. If a user signs in for desktop billing, a backend session token may be stored locally and sent only over HTTPS to the configured Clean Social backend for entitlement and billing actions.

Social media blocking uses coarse navigation signals for supported surfaces such as YouTube Shorts, Instagram Reels, and broad Reddit feeds. The explicit content shield is opt-in and domain-level only. Support: https://clean-social.vercel.app/support.