Privacy policy
Last updated: August 31, 2026.
Scope
Verdict is a free, public service available worldwide for Amazon.fr product pages only. It is not affiliated with Amazon.
Data and purposes
Verdict requires no account. Before each first analysis, it asks for explicit, versioned consent. If you decline, close the disclosure or later withdraw consent, future analyses are blocked and no analysis network request is triggered.
When you consent and request an analysis, Verdict sends the product ASIN and title, aggregate rating statistics and, for each public review, its rating, title, text, date, verified-purchase status and helpful-vote count, plus a random installation identifier. These data are used only to produce the verdict and display the indicative free pseudonymous quota.
Recipients and retention
Cloudflare operates the Worker, the derived-verdict KV cache and the quota Durable Object. OpenRouter routes text analysis to the DeepSeek model served by DeepInfra via OpenRouter. Routing is pinned to DeepInfra, with fallbacks disabled, parameter support required, data collection denied and ZDR required. Enforcement still depends on OpenRouter and DeepInfra. Those providers may process IP addresses and other technical request metadata under their own policies and legal obligations.
Verdict does not store raw review text. When at least 8 reviews are analyzed, the derived verdict may be cached using a fingerprint of the exact product, scoring inputs and review sample for 7 days. The fixed quota window and its pseudonymous counters are deleted no later than 30 days after the window starts. The identifier and its 25-analysis display quota are rotatable and therefore are not a security boundary. Withdrawing consent blocks future analysis but does not delete data.
Security and use
Requests use HTTPS in production. Native per-IP Cloudflare limits run before fingerprint, cache or Durable Object access and cover analysis POSTs (10/minute) plus all analysis/deletion operations (20/minute); cache hits remain quota-free and use no LLM, but are rate-limited against amplification. The limits are permissive and may be locally consistent per colo. A mandatory hard OpenRouter spending cap is the actual budget boundary. Verdict does not sell data, serve advertising, build profiles or share data for advertising. Use of data received from Google APIs, if any, follows the Google API Services User Data Policy, including the Limited Use requirements; the current product does not request Google user data.
Your choices
You can withdraw consent or explicitly delete the quota record and local analysis data from the extension popup. Deletion uses the locally held installation identifier as revocable proof of possession, not strong authentication, and never affects another installation. A technical invalidation marker containing only a generation and expiry—no text or identifier—may remain for up to 2 minutes to reject in-flight commits, then is purged. A replacement identifier is created only at the next consented analysis. If deletion fails, local data are retained so it can be retried. You may also ask a privacy question at t.issop69@gmail.com.