Check Before You Click — Desktop Privacy & Help

CHECK BEFORE YOU CLICK — DESKTOP EXTENSION

Privacy policy and help • Effective October 21, 2026

Published by Baht Kaleb LLC / Baht Kaleb Consulting. This policy covers the desktop browser extension separately from the iPhone/iPad app.


CONTENT YOU CHOOSE

The extension processes text you paste or explicitly select using its right-click command, and website addresses you choose to check. It does not automatically read your inbox, monitor browsing, or read all page content.


LOCAL CHECKS

Checks run locally in your browser. The extension sends no checked message text, website addresses, or results to us or a scanning service. It has no analytics or advertising SDK, remote AI model, or saved check history. All checking code is packaged with the extension. We do not sell checked content or use it for advertising, creditworthiness, lending, or unrelated purposes.


TEMPORARY BROWSER MEMORY

Right-click commands and popup expansion briefly place selected input in browser storage.session memory using a random one-use receipt. The checker removes the entry when retrieved. Requests older than two minutes are rejected. An unconsumed entry may remain until cleanup on a later request or browser restart; expiry is not an automatic deletion timer. The extension does not save input in storage.local, storage.sync, or a server. Input on an open checker page remains until cleared or the page is left. Browser and operating-system features outside the extension have their own behavior.


PERMISSIONS

contextMenus provides user-invoked right-click commands. storage enables the temporary in-browser handoff. The extension requests no host permissions and uses no content scripts, Gmail API, or browsing-history API.


OPTIONAL EXTERNAL PAYMENTS

All basic extension checks remain free. If you select Support this project, the extension opens our public PayPal checkout: https://www.paypal.com/ncp/payment/7A3KC68EC9D3N

Support is an optional one-time payment. It does not unlock features, create a subscription, or automatically renew. The extension does not append checked content or results to the checkout link and requests that no referrer be sent. PayPal processes payment information under its privacy policy: https://www.paypal.com/webapps/mpp/ua/privacy-full

We do not collect card details inside the extension. We may receive transaction information PayPal provides to sellers to process and administer support payments. No payment tracking or verification code runs inside the extension. Review the amount and recipient before paying.


SUPPORT EMAIL AND THIS WEBSITE

If you contact us, our mailbox and your email provider process what you send so we can respond. This website is hosted by GoDaddy and uses website features separately from the extension. Website providers may process ordinary request information, such as IP address and browser information, and cookies or site-service data according to their policies and your settings. The extension does not automatically send checked content to this website. GoDaddy's privacy policy: https://www.godaddy.com/legal/agreements/privacy-policy


HOW TO USE IT

Open the toolbar checker, choose Message text or Website address, paste content, and select Check for warning signs. On an ordinary HTTP/HTTPS page, highlight text and right-click Check selected text for warning signs, or right-click a link and select Check this link before opening. Review captured content before checking. Use fictional examples to practice. Remove passwords, codes, and private details before checking. Clear removes displayed input and results. Restricted browser pages and some embedded surfaces may not offer extension menus. Webmail may wrap links in redirects; the extension does not resolve the final destination.


LIMITATIONS

The extension checks common wording patterns and address structure. Warnings are not proof of fraud. No matching patterns does not mean a message or website is safe. Legitimate messages may trigger warnings, and scams may produce none. It does not visit submitted websites, expand shortened or redirected links, scan files or attachments, verify senders, use a live threat database, monitor your inbox, block clicks, or prevent account compromise. Desktop screenshot recognition is not included. Verify requests through a source you already trust.


CONTACT AND CHANGES

Email consulting@bahtkalebconsulting.com for help or privacy questions. Include your browser and extension versions and fictional or redacted examples. Do not send passwords, verification codes, account numbers, private messages, or unredacted screenshots. We update this policy when practices change and display its effective date.