The Chrome extension and this website. Last updated 14 September 2026.
Dear Customer runs inside your browser. It processes recent WhatsApp Web messages, sender names, phone numbers and chat metadata locally to identify business senders and promotional messages. Message text can include personal communications and sensitive information already present in those chats; it is not uploaded to the Dear Customer service. You choose which senders and actions to run, whether to contribute business names and hashed numbers to the Wall, open an X draft containing aggregate results, or save an image card to share yourself.
Selected actions use your existing WhatsApp Web session. Opt-out requests and STOP replies are sent through WhatsApp to the selected business. Choosing Report uses WhatsApp's reporting feature and can send the selected sender's message context to WhatsApp. Block and archive requests, and delete requests from versions before 1.0.3, are also handled by WhatsApp. These actions are separate from contributing to the Wall and are subject to WhatsApp's own privacy policy.
All of this lives in Chrome's extension storage on your device. Removing the extension deletes it.
When you press Add to the Wall, or leave automatic contribution on (offered during setup, on by default for new installs, and switchable off at any time on the setup or results screen), the extension sends the following for the eligible businesses:
Wall contributions do not upload your own account name or phone number, your address book, message content, or businesses you did not choose to contribute. Submitted sender display names are shared as shown in WhatsApp and may identify an individual operating a business. The extension also downloads the public list, cached for six hours, and refreshes it after a contribution.
Post to X opens X with aggregate results from your run and the Dear Customer website link. It does not include message content, phone numbers, or business names in the draft. You review and publish the post yourself. X receives the draft text when you open it, and its own privacy policy applies.
Save share card and Save chart create image files locally. They can include business names and counts, but no message content or phone numbers. Dear Customer does not upload these files. You choose where to share them.
The reports above, including contribution counts and timestamps, are stored in a database for as long as the list exists. A business is only named on the public page once at least three separate installations, on different networks, have reported it for promotional messages, and only official WhatsApp business accounts can be listed; below that its reports are stored but never published, and the numbers it used are not published either. The public page shows business names and counts. Hashes are published in list.json so the extension can match numbers. Hashing does not guarantee anonymity: someone can hash a candidate phone number and compare it with the published value. Our hosting provider, Cloudflare, processes request metadata, including IP addresses, for delivery, logs, abuse prevention and rate limiting. To tell networks apart, each contribution also stores a keyed hash of the network part of the IP address it came from; the address itself is not stored. Businesses can be hidden after a removal request.
Dear Customer's use of information received through Chrome extension permissions complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. Data is used only to provide the extension's disclosed spam-management, history and optional sharing features. It is not sold, used for advertising or unrelated profiling, or used to determine creditworthiness or for lending. Transfers occur only as needed for these disclosed features, with the user's choices described above, or when required for security or by law. The developer does not receive or read private message content through the extension.
If a business is listed and you believe that is wrong, or you run that business, open a removal request. Entries come from users, not from the site operator.
Dear Customer does not add analytics or advertising trackers. The site runs on Cloudflare. Where a launch video is available, its preview image is served by this site. YouTube is contacted only when you choose to play the video or open its link. Playback uses YouTube's privacy-enhanced embedded player; YouTube receives request and playback information and its own privacy policy applies. The extension uses wa-js, an open-source library, bundled locally. Dear Customer is not affiliated with WhatsApp or Meta.
Questions go to the issue tracker.
Dear Customer