Back

Privacy Policy — ThoughtLab Geo

Chrome extension · Last updated: May 7, 2026

ThoughtLab Geo is a Chrome extension that shows the top countries viewing your own Reddit posts and comments, along with per-post view counts and engagement, all rendered locally in your browser. This policy explains what the extension does with your data.

Single purpose

ThoughtLab Geo exists to surface the geographic distribution of viewers on the signed-in user's own Reddit posts and comments — plus per-post view counts, engagement, and per-subreddit performance — locally in the browser.

Data collection

The extension does not collect, store, transmit, sell, or share any personal information. No analytics, telemetry, tracking, or logging of any kind occurs. There is no backend server associated with this extension.

• We do not sell or transfer user data to third parties outside of the approved use cases.
• We do not use or transfer user data for purposes unrelated to the extension's single purpose.
• We do not use or transfer user data to determine creditworthiness or for lending purposes.

What the extension accesses

When you click the extension icon, the extension reads your existing token_v2 OAuth cookie from reddit.com. This cookie is used solely to make authenticated requests to Reddit's own API (oauth.reddit.com and www.reddit.com) on your behalf, at the rate limit Reddit grants to logged-in users. The cookie value is never sent to any server other than reddit.com. If you are not logged into Reddit, the extension stops and asks you to log in.

Once authenticated, the extension reads the signed-in user's own Reddit content from Reddit's API: your username, your submitted posts, and your authored comments. For each of your posts, the extension fetches the post's /poststats/ page from www.reddit.com to extract its view count, country breakdown, upvote ratio, replies, and shares. All of this data is read into your browser's memory for the sole purpose of local rendering and aggregation. It is never transmitted to ThoughtLab or any third party. See "Local cache" below for how the result is stored on your device so you can re-open it without re-fetching.

The extension only ever reads content authored by the signed-in user. It does not read posts, comments, profiles, or messages belonging to anyone else.

Script injection

If you already have a tab open on your own Reddit profile (www.reddit.com/user/<you>/), the extension may briefly inject a small read-only script into that tab to harvest view counts that Reddit has already rendered into the page's DOM. This is done to avoid re-fetching the same listing pages and to respect Reddit's rate limit.

The injected script only reads the DOM — specifically <article> elements containing a[href*="/commentstats/t1_"] links and their adjacent view-count text. It does not modify the page, fetch remote code, transmit data, or persist anything. All injected code is bundled inside the extension package reviewed by the Chrome Web Store.

Where data goes

All network requests go to Reddit only (www.reddit.com and oauth.reddit.com). No data is sent to ThoughtLab servers or any third party. All counting, aggregation, sorting, and rendering happens locally in your browser.

Local cache

The extension writes two entries to chrome.storage.local:

• tlgKickoff — a small handoff record containing the signed-in Reddit username and a timestamp, written when you click the icon and read by the viewer tab when it opens. Overwritten on each run.
• tlgSnapshot — a per-user snapshot of your most recent analysis, keyed by Reddit username. It contains the posts and comments fetched during the run, the country aggregates derived from them, and cached subreddit metadata. It is written so that re-opening the viewer renders instantly instead of re-firing hundreds of requests against Reddit.

Both entries stay on your device, are never transmitted anywhere, and are removed automatically when you uninstall the extension. Clicking the "Refresh" button in the viewer forces a fresh fetch from Reddit and overwrites the snapshot.

Permissions used

• cookies — to read your Reddit token_v2 cookie for authenticated requests back to Reddit.
• scripting — to inject a small read-only script into your own open Reddit profile tab to harvest already-rendered view counts and avoid re-fetching.
• storage — to cache the kickoff handoff and your most recent analysis snapshot locally, so re-opening the viewer does not re-fetch from Reddit.
• Host permissions for reddit.com — to fetch your own posts, comments, and /poststats/ pages from Reddit for local analysis.

Remote code

The extension does not load or execute any remotely hosted code. All JavaScript, fonts, and country flags are bundled in the extension package reviewed by the Chrome Web Store.

Children's privacy

The extension does not knowingly collect information from anyone, including children under 13.

Changes

If this policy changes, the updated version will be posted at this URL and the "Last updated" date above will be revised.

Contact

Questions: stephen@thoughtlab.live · thoughtlab.live

ThoughtLab is not affiliated with Reddit, Inc. All data is sourced from your own Reddit account via Reddit's public API and is provided as-is with no guarantee of accuracy or completeness. v1.0.78