NostrComments has no server. There is no account, no email, no tracking and no
analytics, and the developer never receives your data — there is nowhere for it to go.

NOTHING HAPPENS UNTIL YOU ENABLE IT
On first use you get a disclosure screen. No relay is contacted before you accept it,
and you can disable NostrComments per site at any time.

SENT TO PUBLIC NOSTR RELAYS (third parties you choose)
- Loading comments: the address of the page you are on, so the extension can show that
page's thread.
- Posting a comment or vote: your comment or vote, the page address, and your Nostr
public key. Relays are open servers not operated by NostrComments; anything published
there is public by design.

SENT WHEN YOU ZAP (optional)
If you tip a commenter, or the developer, your browser contacts that recipient's
Lightning provider to fetch an invoice and your own wallet pays it. That provider sees
the request, including your IP address. No payment code is bundled and no money passes
through the developer. Supporting the developer is voluntary and unlocks nothing.

STORED ON YOUR DEVICE ONLY, NEVER TRANSMITTED
- Your Nostr key, if you generate one here. You can protect it with a password, in which
case it is encrypted at rest (PBKDF2 + AES-GCM).
- Your relay list, muted users, muted words, per-site disable list, theme, consent
choice, and two flags recording that you confirmed your key backup and sent a support
zap.
- A list of the 300 most recent pages where you opened the comment panel, with a
timestamp, so comments posted since your last visit can be marked "new". Older entries
are discarded. This never leaves your browser.

WHAT IT DOES NOT DO
No data to the developer. No collection, transmission or profiling of your browsing
history. No analytics or telemetry. Nothing transmitted before you explicitly enable it.

Full policy: https://github.com/briskness-byte/NostrComments/blob/main/PRIVACY.md