Remedia browser extension - Privacy Policy

Last updated: 8 October 2026

Who is responsible. The Remedia extension and the website remedia.social are developed and run by
Mist Art, a sole proprietorship of Aleksandar Perc (Croatian tax number OIB 33452130643, address
Montiron 70, 52204 Šišan, Croatia). Contact: kontakt@remedia.social. Mist Art is the controller of the personal data
described below. (The Artes Association, of which Aleksandar Perc is president, collaborates on content
and digital-literacy workshops; it is not the controller.)

What Remedia does. The extension marks links to news portals on the pages you read: it can replace a
clickbait headline with a more honest one, show fact-check marks and editorial marks on links, and dim
articles that carry an editorial mark.

The short version.
- The extension does nothing, and sends nothing, on any website that is not on a public list of portals
Remedia tracks, and on a short list of sites where it only looks for links to those portals (for
example social networks and search engines). It never reads or sends anything on sites such as webmail,
work tools, messaging, or on private parts of a site (for example Facebook messages). You can switch it
off on any site yourself.
- Your settings, the list of sites you switched off, the cache and the usage counters stay in your
browser. They are never sent anywhere.
- Remedia does not sell data, does not show ads and does not track you across sites.

What is sent, and when.

1. The list of tracked portals. The extension downloads a public list from remedia.social about once a
   day. The request carries no account and no identifier. Like every web request it reaches our server
   with your IP address and browser details, which our hosting provider processes to serve the request.
2. On a tracked portal. To show marks, the extension asks remedia.social about the links on that page
   that lead to the same portal. The request contains those article addresses (without anything after
   "?"), is made without cookies, without an account token and without a referrer, and is the same for
   everyone.
3. On other sites (for example Facebook or a search engine). The page is read only locally. If it links
   to a tracked portal, the extension may ask for a public snapshot of that portal - the request names the
   portal's domain only, at most once an hour per portal. No article address, and no address of the page
   you are on, is sent.
4. Only when you choose it:
5. Sign in: you sign in on remedia.social (with Google or Facebook, through our site); the extension
   receives a short-lived token. We store your name, e-mail address and profile picture from that
   sign-in to run your account.
6. Dislike (signed in): the address, title and image of the link are stored with your account. Your
   dislikes are private signals, visible only to you and to people who follow you; they are never public.
7. Report a suspicious page: the address and title of the page you report, without your identity.
8. Suggest a portal: the domain name only.
9. Report a mistake in an editorial mark: the message you write and, only if you type one, your e-mail
   address so we can answer. Nothing else about you is stored (no IP address, no account, no device
   identifier). We keep the complaint until we have decided on it and for as long as we need to be able to
   answer you; you can ask us to delete it, together with your e-mail address, at any time by writing to
   kontakt@remedia.social.
10. Tools for signed-in users who have access to them (for example drafting a reply or summarising an
    article): the text you select in the page is sent to Remedia and to the AI providers we use to
    process it (Anthropic, and Voyage AI for text similarity search); a screenshot is taken only when you press
    "capture as evidence" or report comments, and only for staff roles.
11. A small technical report about whether a selector worked (no page content) when you use the reply
    tool.

Who processes it for us, and where. Hosting on Vercel; database on Neo4j; cache and queues on Redis;
screenshots (staff tools only) on Amazon Web Services S3; e-mail through Mailgun (EU region); AI processing by
Anthropic and Voyage AI. These providers act on our instructions. Some of them are based outside the EU/EEA, so
data can be transferred there under the safeguards the law requires (for example standard contractual
clauses).

Why we may process it (GDPR). To provide the service you asked for (your account and the tools you
use), our legitimate interest in running and securing a fact-checking service, and, for the optional e-mail in
a complaint, your consent (you can withdraw it at any time).

Your rights. You can access, correct or delete your data, withdraw consent, and complain to the
Croatian Personal Data Protection Agency (AZOP). Delete your account and its data from your profile on
remedia.social, or write to kontakt@remedia.social. In the extension's settings, "Delete all local
extension data" removes the cache, counters and your list of switched-off sites from your browser.

Why the extension needs its permissions. Access to websites: the add-on is allowed to run on every
web page because the list of tracked portals changes over time; on a page that is not on the list (or that you
switched off) it reads nothing and sends nothing. On the others it reads the links locally. Storage: your settings and cache. Tabs / active tab: to know which page the popup is
about and to let you switch Remedia off there. Identity: to sign in. Context menus: the right-click
actions. Notifications: short messages about an action you started. Alarms: refreshing the list of
tracked portals.

Children. Remedia is not directed at children under 16.

Changes. We will update this page and the "last updated" date when anything changes.