retrieverBuilt to be verified, not trusted.
Retriever wires cashback into your browsing and your AI tooling, and we know exactly how that sounds. Every claim below is checkable on your own machine, in minutes, starting with the source.
What runs where
The browser extension
Page text is scanned on your device against the cached offer catalog. The only network calls: anonymous device registration, catalog refresh, and the funnel events (offer id and timestamp, never page content).
The developer client
A status line script with zero network calls, zero credentials, no self-update. It reads a local offer cache and one file timestamp. All network lives in commands you invoke yourself.
Local matching
Which offer you see is decided on your machine, from local context. The server sends a bundle of candidates; your machine picks. We never learn what you read or build.
Click-only activation
An affiliate link exists only after you click an offer. Never at page load, never at checkout, never by rewriting someone else's link.
What leaves your machine
An anonymous device id and its server-issued token, offer clicks, funnel beacons (offer id and timestamp), and the conversions merchants report. That is the whole list. No prompts, no pages, no code, no telemetry SDK.
Official extension points only
Browser extension APIs and documented Claude Code configuration. We never patch binaries, never touch your editor's security policy, never ship code outside the stores' review.
Uninstall means uninstall
Removing the extension or running the uninstall command restores your settings from the pre-install backup and deletes the local folder. Nothing survives.
Anti-fraud, server-side
Crediting is enforced on the server: per-device cooldowns, daily caps, idempotent conversion events. Farmed sessions never credit, which protects merchants the same way the rest of this page protects you.
No manufactured moments
An offer appears only when a partner is genuinely mentioned or genuinely relevant. No fake urgency, no injected content in your feeds.