Privacy
Last updated: July 19, 2026
Short version: Karafilt filters audio entirely in your browser, we never see it. Song titles are sent to public lyrics databases to find lyrics. You sign in with a free account, so we hold your email to identify your account. While you're signed in, the extension reports your filtering activity to us — which song, which mode, for how long — which powers the usage stats on your account page and helps us improve the filter. We don't sell data, run third-party trackers, or train models on your audio, and you can delete your account, along with everything tied to it, whenever you like.
1. Who we are
Karafilt is an open-source project that anyone can contribute to. The hosted service (your account) is operated by Betania.io, a business registered in Serbia, which is the controller of the personal data described below (“we”, “us”). Contact: hello@betania.io.
2. The browser extension
This section is the privacy disclosure for the Karafilt browser extension (Chrome Web Store listing included).
- Filtering is 100% local.Every vocal-removal mode processes the tab's audio inside your browser (WebAssembly). The audio never leaves your machine and we have no way to see it.
- Sign-in is required.The extension asks you to sign in with your Karafilt account before use. It uses your site session (never your password) to confirm you're signed in; this is how we keep track of our users.
- Lyrics lookups.To find lyrics for what you're listening to, the extension sends the page's media title (e.g. a YouTube video title, artist/track) and the track duration to public lyrics services: lrclib.net, lyrics.ovh and genius.com. These requests are not linked to any account and contain no personal data; the services see them like any web request (including your IP address) under their own privacy policies.
- Settings stay local.Your preferences (filter mode, mix, lyrics on/off) are stored in your browser's extension storage. The filter mode in use is also included in the usage reports described next.
- Usage reporting to Karafilt.While you're signed in and the filter is active, the extension reports each listening session to our own servers: the page's address and title, the song and artist when detected, the filter mode, how long the filter ran, timestamps, and the extension version. This data is tied to your account — you can see it as the usage stats on your account page — and we use it to understand how the filter is used and to improve it. It is deleted when you delete your account.
- Song ratings.If you choose to rate how well the filter worked on a song (1–5 stars, optional comment), that rating is stored with your account together with the song and page details above. Aggregated, anonymous per-song scores may be shown publicly; your email and comment are not.
- Achievements.The badges on your account page are derived from the usage and party data described above (hours filtered, parties hosted). Top achievers appear on the home-page Hall of Fame: with your display name if you set one, otherwise as an anonymous entry showing only the badge stats, with nothing linking it to your account. Unlocking a badge may trigger a notification email unless you've opted out of Karafilt emails.
- Public aggregate totals. The home page shows all-time community totals (time filtered, songs, parties hosted, badges earned), and we occasionally publish weekly recaps of the same aggregates. These are sums across all users and contain no per-user data.
- No third-party analytics or trackers. The extension contains no advertising, third-party analytics, or cross-site tracking code. The usage data described above goes only to Karafilt, nowhere else.
3. Data we collect
| Data | Why | Retention |
|---|---|---|
| Email address | Account sign-in, email verification, service notices, and occasional Karafilt product announcements — opt out of announcements anytime via the unsubscribe link in every such email or the toggle on your account page | Until you delete your account |
| Display name (optional) | Shown publicly if you set one: next to your posts on the feedback board, and on the home-page Hall of Fame (with your achievement badges) if you rank among the top achievers | Until you delete your account |
| Listening activity (from the extension) | Page address and title, song/artist, filter mode, duration, and timestamps of each filtered listening session — powers the usage stats on your account page and helps us improve the filter | Until you delete your account |
| Song ratings (if you submit them) | Your 1–5 star rating, optional comment, and the song it applies to — measures how well the filter works; only anonymous aggregates are ever shown publicly | Until you delete your account |
| Party mode rooms | Hosts: room name and account email. Guests (no account needed): the nickname you enter and the songs you add — used only to run the shared queue | Rooms close after at most 12 hours; data is deleted with the host's account |
| IP address + technical logs | Security and abuse prevention (standard logs of our hosting providers) | 30 days |
The audio you filter is never collected, every mode runs entirely in your browser and nothing is uploaded. Party guests join without an account: the nickname you enter is visible to everyone in the room and stored with the songs you add, so feel free to use any name.
4. Lawful basis (GDPR)
- Performance of contract, your email address. Required to provide and identify the account you signed up for.
- Performance of contract, party room and queue data. Required to run the shared queue you and your guests are using.
- Legitimate interest, listening activity and song ratings, limited to showing you your own usage stats and improving the vocal filter. You can object at any time by emailing us, and deleting your account removes this data entirely.
- Legitimate interest, occasional product announcement emails about Karafilt. Every such email carries a one-click unsubscribe link, and you can also opt out from your account page — opting out stops them immediately and permanently.
- Legitimate interest, IP address and technical logs, limited to security, abuse prevention, and capacity planning.
5. Who we share data with (subprocessors)
- Supabase, authentication and database (your account).
- Vercel, website hosting.
Lyrics lookups from the extension (section 2) go directly from your browser to lrclib.net, lyrics.ovh and genius.com, they are independent services, not our subprocessors. We do not share data with advertisers, brokers, or other third parties.
6. International transfers
Some subprocessors above operate outside the EU/EEA (notably Supabase and Vercel, in the United States). Where required, transfers are governed by the European Commission's Standard Contractual Clauses (SCCs). You can request a copy of the relevant clauses by emailing the address in section 1.
7. Your rights
Under GDPR (EU/UK) and the CCPA (California), you have the right to:
- Access the data we hold about you
- Correct inaccurate data
- Delete your data (right to be forgotten), you can delete your account yourself from the account page at any time
- Export your data (data portability)
- Restrict or object to processing
- Opt out of any future sale of personal information (we do not sell)
- Lodge a complaint with your local data protection authority
To exercise any of these, email hello@betania.io. We respond within 30 days.
8. Cookies & analytics
We use only essential cookies, the session cookie that keeps you signed in. The browser extension uses this same session (never your password) to show your signed-in status in its panel.
For aggregate page statistics this website uses Vercel Web Analytics, and to measure page performance we use Vercel Speed Insights. Both are cookieless: they set no cookies, store no identifiers on your device, and do not track you across sites, we only see anonymous, aggregated counts and performance timings. We do not use advertising, cross-site tracking, or cookie-based analytics (such as Google Analytics). If that ever changes, we'll show a consent banner first.
9. Children
Karafilt is not directed at children under 16. We do not knowingly collect data from anyone under that age. If you believe a child has provided us data, email us and we'll delete it.
10. Security
Data is encrypted in transit (TLS) and at rest. No system is perfectly secure; if we ever experience a breach affecting your data, we'll notify you within 72 hours.
11. Changes
Material changes will be announced by email at least 30 days before they take effect. The last-updated date at the top of this page reflects the most recent revision.