Privacy Policy – Lemmy Upload
Last updated: 2025

Lemmy Upload is a client-side browser extension. It does not collect analytics or send any data to the developer.

1. What data does the extension access?

The extension only accesses data needed to perform uploads when you use it:

The URL of the current tab (for building the source link).

The URL of the image/media you right-click.

Text you type into the upload popup (post title, source link text, NSFW flag).

Your Lemmy instance URL and auth token (JWT), which you enter in the options page.

This data is used only locally in your browser to build and send the upload request.

1. What data is stored?

The extension stores the following in your browser’s local storage:

Lemmy instance URL

Lemmy auth token (JWT)

Your upload preferences (remember last community, saved communities, last source text per community)

Cobalt API endpoint and optional JWT (if you configure one)

This data is only stored locally in your browser. It is not sent to the developer or any third party other than the services you explicitly configure (your Lemmy instance, your Cobalt instance).

You can clear this data at any time by removing the extension or clearing its site data / extension storage in your browser.

1. What data is sent to third-party services?

When you choose to upload, the extension sends data directly from your browser to:

Your Lemmy instance

Post title

Target community

URL of the media (usually a Catbox link or Lemmy’s own Pictrs backend)

Optional post body (source link markdown)

NSFW flag

Your auth token (JWT) for that instance

Catbox (catbox.moe) – for video (and sometimes other media) hosting

The media file you are uploading (video/GIF/image), either via URL or file upload

Cobalt instance (if configured) – for resolving Twitter/X media

The URL of the Twitter/X post you are uploading

The Cobalt instance may download media from Twitter/X and expose a temporary media URL that the extension then uploads to Catbox.

These requests are only made when you explicitly trigger an upload.
The developer of this extension does not operate Catbox or your Cobalt/Lemmy instances and has no access to their logs or stored data.

You should review the privacy policies of:

The Lemmy instance(s) you use

Any Cobalt instance you configure

Catbox (catbox.moe)

1. Analytics, tracking, and advertising

The extension does not include any analytics, tracking scripts, or advertising.

No usage telemetry, browsing history, or personal identifiers are sent to the developer.

1. Children’s data

This extension is a technical tool for Lemmy users and is not specifically directed at children. It does not knowingly collect any data about children.