NoneCap extension privacy policy

This policy covers the NoneCap Chrome extension. The extension detects hCaptcha challenges on pages you visit, sends a cropped screenshot of the challenge to the NoneCap API, and clicks where the API says to click. The extension is open source on GitHub, so you can verify everything below in the code. For the website and the API itself, see the main privacy policy.

What the extension sends

When the extension solves a captcha, five things leave your browser:

A cropped challenge screenshot. The extension captures a screenshot cropped to the captcha challenge area only, and sends it to the NoneCap API so the API can decide what to click. Each request also carries the challenge type (image grid or puzzle) and a short server-issued session id that groups the rounds of one solve.
The host domain of the page. We receive the domain only (for example example.com), never the path or query string.
An anonymous install key. A key issued automatically on first run that identifies the install, not you. More on this below.
Your NoneCap API key, if you connected one. Sent only to authenticate your solves against your account.
Anonymous solve-outcome pings. Whether a solve succeeded or failed, and how many rounds it took.

What never leaves your browser

The extension does not collect page content outside the captcha, full URLs, cookies, browsing history, form data, or personal information. On pages without an hCaptcha challenge the extension sends nothing and stays idle.

The anonymous install key

When the extension first runs, the NoneCap server issues it a free-tier key and records the IP address it registered from. The key is not tied to an email address or account, but the server does record the IP addresses it is used from to enforce daily limits and prevent abuse. Resetting or uninstalling the extension discards the key from your browser, and a fresh install gets a fresh key. If you want a discarded key disabled on our side as well, email us and we will revoke it.

Data retention

Solve sessions (host domain, outcome, round count, and the IP used) are retained for abuse prevention and aggregate statistics. Challenge screenshots are processed to produce the answer and are not stored. We do not sell this data or share it for advertising.

Your NoneCap API key

Connecting an API key is optional. If you connect one, the extension stores it locally in extension storage and sends it only to the NoneCap API to authenticate your solves. Usage then appears on your account like any other API request, covered by the main privacy policy. Disconnecting the key removes it from the extension.

Contact

Questions about the extension or this policy? Email [email protected].