中文English日本語
Add to Chrome

The policy is maintained on GitHub, and that version prevails: PRIVACY.md

ClearFlow (清流) Privacy Policy

Effective date: October 19, 2026

ClearFlow is a browser extension that cleans up comment sections and translates posts on X, Reddit, YouTube, Xiaohongshu (RedNote) and Hacker News. It is published by OhMyAI. This policy explains what the extension reads, what it sends and to whom, and what it keeps on your device.

The short version: ClearFlow sends the comments and posts you are looking at to two services you choose and pay for — TypeSafe (to judge them) and OpenRouter (to translate them) — using API keys you enter yourself. It sends nothing to us, the developers. It has no analytics, no tracking and no remote code. Everything else stays in your browser.

Where it runs

The extension's scripts run only on these sites: x.com, twitter.com, www.reddit.com, www.youtube.com, www.xiaohongshu.com, www.rednote.com and news.ycombinator.com. It does not read your browsing history or any other website. On those sites it reads only your own username, locally, so it doesn't judge your own posts; it never sends it anywhere.

What is sent, and to whom

TypeSafe (api.typesafe.ai) — judging comments

Used for cleaning (spam, abuse, sexual content, and replies like "nice" or "+1"), and on X to judge the quality of X's own translations. Only sent if you entered a TypeSafe (Jev) key.

  • For each comment on the page that local rules can't decide: the comment text (up to 600 characters), the commenter's display name and handle, the text of the post it belongs to (up to 400 characters) and the post author's name and handle. Up to 10 comments per request.
  • On profile and search pages on X and on list pages on Reddit, the posts in the list instead of comments, with a fixed one-line description in place of the post text.
  • On X posts that X translated automatically: the original text and X's (Grok's) translation. When ClearFlow retranslates such a post (below), its own translation too, so the two can be compared.
  • Only if you turn on "Look at images in replies" (off by default): images attached to those comments, downscaled, together with the text. To do this the extension asks for permission to read images from pbs.twimg.com, i.redd.it, preview.redd.it and *.xhscdn.com; it gives the permission back when you turn the option off.
  • Only if you have marked spam yourself on that site ("Hide this reply", or the funnel on a notice bar): your 10 most recently marked replies on that site (text up to 240 characters and the account), sent with those comments as examples, so TypeSafe can tell whether a comment is the same kind of spam. Right after you mark one, the comments on that page that weren't cleaned are checked once more against the examples (up to 25 per request).
  • On YouTube, only when you choose YouTube's auto-translated captions and "Improve auto-translated captions" is on (and the video has no human Chinese captions to use instead): the first lines (up to 40) of the original captions and YouTube's translation of them, to judge how good YouTube's translation is.
  • The same comment in the same context is not sent again for 7 days (results are cached locally).

OpenRouter (openrouter.ai) — translating

Only sent if you entered an OpenRouter key and translation is on for that site.

  • The text of posts and comments that need translating (or a better translation than X's). Not the author, not the post ID, not anything else on the page.
  • On YouTube, only when TypeSafe judged YouTube's auto-translated captions to be poor (above): the original captions of the part of the video you are watching, about 40 lines at a time, to retranslate them. Converting Traditional Chinese captions to Simplified happens on your computer and sends nothing.
  • OpenRouter passes the text to the translation model you choose in Settings (by default an OpenAI model, with a DeepSeek model as fallback). Each of those providers has its own data policy.

Nobody else

ClearFlow sends nothing to OhMyAI or anyone other than the two services above. There is no analytics, crash reporting, advertising or tracking code. All code is in the extension package; nothing is downloaded and run later.

When you click "Test connection" in Settings, a short fixed sample text is sent to the service being tested.

What is stored on your device

All of the following is stored only in your browser's extension storage (chrome.storage.local and IndexedDB) and is never uploaded:

  • Your settings and your two API keys. The keys are kept in the extension's own database in this browser, which the websites you visit (and the extension's scripts running on them) can't read; only the extension's background worker uses them. They aren't encrypted.
  • Daily counters (how many items were cleaned or translated, estimated cost).
  • Your corrections ("not spam", "hide this reply") and the spam you marked, with the comment text (up to 300 characters; the last 3,000 corrections, the last 500 marked replies).
  • A cache of TypeSafe results (fingerprints and scores only, no text; deleted 7 days after the comment was judged) and a cache of translations (the translated text; deleted once it hasn't been used for 30 days). Each cache is capped at 50 MB by default; the oldest entries go first when it's full.

On X and YouTube, two small scripts (pagedata.js, ytdata.js) run inside the page and read the site's own API responses that the page already received — to get a post's original (untranslated) text and who wrote a comment. They only read; they never send requests or change what the site receives.

Your choices

  • Turn ClearFlow off for any site, or turn off cleaning or translation separately, in the popup or Settings.
  • Settings → Data and privacy: export your data (settings, statistics, your corrections and the spam you marked), clear the caches, or clear statistics and records, including your corrections. The spam you marked is listed in Settings, where you can delete entries one by one or all at once.
  • Uninstalling the extension deletes everything it stored.
  • You can revoke or rotate your API keys with TypeSafe or OpenRouter at any time.

Children

ClearFlow is not directed at children and does not knowingly collect information from anyone.

Changes

If this policy changes, the new version will be published at https://github.com/remember2015/clearflow/blob/main/PRIVACY.md with a new effective date, and noted in the changelog.

Contact

developer@ohmyai.app