Local filtering. Anonymous usage stats. Minimal personal data.

What we collect

Almost nothing from your Marketplace browsing. Listing titles, photos, prices, sellers, URLs, and search queries are never sent. Filter logic runs inside your browser; the decision — show, hide, or fade — is applied in place and never reported. The one exception is the distance filter: when it's on, a listing's visible location (e.g. "Cluj, Romania") and the fallback city you type are sent to our geocoding service to turn place names into coordinates — see Location lookups below.

Anonymous usage events. So we can decide which features to invest in, the extension sends a small list of events to a database we operate. Each event includes a random install ID (a UUID generated on first launch), the event name, a few simple properties, and the extension version. The complete list:

• popup_opened — fires when you open the extension popup. Used for DAU.
• setting_changed — which toggle or dropdown changed, plus its new boolean / enum / number value. Example: { key: "strictRadiusEnabled", value: true }.
• wordlist_changed — which of the four word lists changed (blocked / required / phrase / any), whether an entry was added or removed, and the new total count. The words themselves are never sent.
• section_toggled — which popup section was opened or closed.
• reset_clicked — which reset button you pressed (lifetime counters, viewed history, or new-listings baseline).
• footer_link_clicked — whether you clicked Request feature or Leave a review.
• sort_forced — that Force Newest Sort added or removed the sort parameter, and on which surface (search or category).
• freshness_visit_advanced — that the "show only new" baseline re-anchored on a new visit, with the time gap in hours, so we can measure the per-visit reset.
• review_nudge_shown / review_nudge_clicked — that an occasional "leave a review" prompt was shown, and whether you clicked it.
• detection_degraded — a diagnostic flag for when MarketClean can't read Marketplace cards reliably (an early warning that a Facebook change broke us). Counts only — no page content.
• radius_health — a once-per-visit diagnostic summary of the distance filter (how many cards were evaluated, hidden, or unresolved), so we can spot a silently broken filter.
• disable_reason — if you uninstall and choose a reason for leaving, which reason you picked.
• monetization_notice_shown / monetization_notice_dismissed — that the one-time notice about the Distance filter becoming part of MarketClean Pro was shown to you, and that you dismissed it.
• go_pro_clicked — that you clicked an upgrade button, plus which plan (monthly or annual). No payment details are involved — checkout happens on Stripe.
• restore_purchase_clicked — that you opened "Restore purchase" to re-link a subscription to this install.
• trial_start_clicked — that you clicked "Start 7-day free trial", and separately that the verification email was sent. Your email address is not included in this event.
• distance_cap_reached — that the distance filter hit its daily lookup limit in this browser tab (the trigger for the Pro upsell). A count only — no listing or location content.

What is never sent under any event name: the words on your blocked / required / phrase / any-of lists; any Facebook URL, page, or listing content; your IP address (used at the edge for rate limiting and a daily anti-abuse cap on distance lookups — kept only as a short-lived daily counter, never linked to your install ID or events); your email, name, or any other identifier. (Location names used by the distance filter are sent separately to our geocoder — see Location lookups — never as usage events and never tied to your install ID.)

The install ID is a random UUID stored on your device in Chrome's extension storage. Uninstalling the extension removes it. A fresh install generates a new ID — past data cannot be linked back to the new install.

If you uninstall MarketClean, you may optionally share a short reason via a feedback form, and — if you choose — your email so we can follow up when a requested feature ships or a reported bug is fixed. The form sends only what you type; leaving the email blank keeps your feedback anonymous.

If you submit a problem report or feature request through our support form, it sends the description you write, your email if you add one, the page you were on, the extension version, and your browser's user-agent string (so we can reproduce browser-specific bugs). Leaving the email blank keeps the report anonymous.

Location lookups (distance filter)

The distance filter needs coordinates to measure how far a listing is. When you enable it, MarketClean sends location names — the fallback city you type, and the visible location text of the listings it's filtering — to a geocoding endpoint we operate, which converts them into latitude/longitude. This happens only while the distance filter is turned on.

To keep these lookups rare, results are cached. The cache stores only the place name and its coordinates — no install ID, no IP, nothing tied to you — and is shared across users. The coordinate data comes from LocationIQ, a geocoding service built on OpenStreetMap data; only the place name is sent, queried by our endpoint so your browser never contacts it directly. If LocationIQ is unavailable we fall back to OpenStreetMap's Nominatim.

If you never turn on the distance filter, no location data leaves your browser.

Chrome permissions

Each permission exists for a specific, narrow purpose:

• Host permission on facebook.com/marketplace — read and modify only Marketplace pages.
• Host permission on market-clean.andreiprojects.com — our own backend, used only for distance-filter geocoding lookups and anonymous usage events. No other websites are accessed.
• storage — save your settings on your device.
• scripting — reinject the filter code when Facebook switches routes without a full reload.
• webNavigation — detect those SPA route changes so filters stay active.

The extension is strictly read-only on Facebook. It does not click, post, message, save, or automate anything on your behalf.

Third parties

The extension loads no third-party SDKs at runtime — no ad networks, no fingerprinting libraries, no remote CDNs. Fonts come from your system; stylesheets and JavaScript ship inside the extension package.

The anonymous usage events listed above are stored in a database we operate on MongoDB Atlas, which acts as the database vendor on our behalf. MongoDB processes the events solely so we can query them; it does not use them for its own purposes. The endpoint is also hosted by Vercel as our serverless platform.

The distance filter's geocoding endpoint (also on Vercel) looks up coordinates via LocationIQ (an OpenStreetMap-based geocoding provider), falling back to OpenStreetMap's Nominatim if it is unavailable, and caches the results in the same MongoDB database. Only place names and their coordinates are stored there.

MarketClean is not affiliated with, endorsed by, or sponsored by Meta Platforms. "Facebook" and "Marketplace" are trademarks of their respective owner and are referenced only to describe what the extension works on.

Payments & subscriptions

MarketClean Pro (unlimited distance filtering) is a paid subscription. Payment is processed by Stripe, which acts as the merchant of record. We never receive or store your card details — Stripe handles the payment, the tax, and your receipts. See Stripe's privacy policy for how it processes payment data.

To start the free trial of the distance filter, you enter an email address and we send you a verification link so we can confirm it is yours. That email is delivered by Brevo, our email provider, which processes your address solely to send that message. We store the verified email to grant the trial, to allow one trial per address, and to let you restore access on a new install — never for marketing.

To link a subscription to your install, the random install ID is passed through checkout so our backend can mark that install as Pro. For an active subscriber we store, in the same MongoDB database, only: the install ID, the subscription status, the plan (monthly or annual), the current period end date, the Stripe customer and subscription identifiers, and — if you provide one at checkout — the email address used for the purchase. The email lets you restore your subscription on a new install and lets us reach you about billing; it is never used for marketing.

If you never start a Pro trial or subscribe, none of this applies and no payment or email data is collected.

Children

MarketClean is not directed at children under 13. Filtering collects no personal data, and the only identifier for a non-subscriber is a random install ID. If you start a Pro trial or subscribe, we collect the email you provide, but never use it to determine a user's age.

Your rights

For filtering, the only identifier we receive is the random install ID stored in your Chrome storage; uninstalling the extension removes it and cuts the link to any past events. If you start a Pro trial or subscribe, we also hold the email you provided and your subscription record; you can ask us to export or delete these at any time (see below). If you want to disconnect sooner, you can clear the extension's local storage from Chrome's extension settings page, which regenerates the ID on next open.

If you'd like us to delete the usage events tied to your install from our database, email andrei.projects@proton.me and we'll remove them. Each event is keyed only to the random install ID, never to you — we can help you find yours if needed.

Changes to this policy

If this policy ever changes, the updated version will be published here with a new "Last updated" date. Substantive changes — for example, adding any form of data collection — would be called out explicitly in the extension's release notes before taking effect.