Klunk Extension Privacy Policy

Summary

The Klunk browser extension does not collect personal information, does not track your browsing, and does not sell or share data with third parties. Below is the longer version.

What the extension does

When you visit a listing page on Carvana, AutoTrader, or Cars.com, the extension reads the make, model, and year text printed on each listing card. It sends those three values to klunk.app to fetch the corresponding Klunk Score, then displays the score as a small badge on the listing card.

What is sent to klunk.app

• The make, model, and year of the car (for example, "ford explorer 2018"). This is the only data sent.
• A standard HTTP request from your browser to klunk.app, which means klunk.app sees the request's IP address and User-Agent at the time of the request, the same way any normal website would.

What is not sent

• Your name, email address, account information, or any identifier that could be tied to you personally.
• The URL of the listing, the price, the seller, the dealer, the VIN, the photos, or any other listing-specific information beyond make, model, and year.
• Your browsing history. The extension only activates on the three listed sites; it has no access to any other site you visit.
• Cookies, third-party tracking pixels, advertising identifiers, or any cross-site state.

Logs and retention

klunk.app's API logs requests for operational purposes (rate limiting, debugging, performance monitoring). Logs include the IP address, the User-Agent, and the make/model/year requested. Logs are retained for 30 days and then deleted. Logs are never sold, shared, or used for advertising.

Anonymous health telemetry

The extension periodically sends a small batch of aggregate counts to klunk.app so we can detect breakage when one of the supported sites changes its layout. Each event contains:

• The site name (carvana, autotrader, or cars)
• Whether the page was a listing or a detail page
• How many cards were seen, how many got a score, how many returned no-data
• The extension version and the active config version

That is the entire payload. No URLs, no IP-based identifiers within the event itself, no listing data, no make/model/year per-event, no user identifier. Server access logs do see the request IP for rate-limiting (same as any web request).

Local storage

The extension stores per-site enable/disable preferences in your browser's local extension storage (synced via Chrome's storage.sync API if you are signed into Chrome). This data never leaves your browser and is not accessible to klunk.app.

Permissions

The extension requests the minimum permissions required to function:

• storage — to remember your per-site preferences.
• Host permissions for carvana.com, autotrader.com, and cars.com — required to read make/model/year text from listing cards on those sites.

The extension does not request any other permissions.

Children

The extension is not directed to children under 13 and does not knowingly collect data from anyone, including children.

Changes to this policy

If the extension's data practices ever change, we will publish the change on this page and update the date below. Material changes will also be announced on klunk.app's homepage.

Contact

Questions, concerns, or data requests: [email protected]. Operating entity: PrimeStack Solutions LLC.