Privacy Policy

This document explains what data the AI Summarizer Chrome extension collects, how we use it, and your rights.

1. What the extension does

When you click Summarize on a video, web page, or PDF, AI Summarizer:

1. Reads the URL of the page you're currently viewing, or the file you uploaded.
2. Fetches the underlying content:
   • YouTube / Vimeo videos — the public caption track.
   • Web pages — the HTML rendered to plain text in your browser.
   • PDFs — the bytes of the file you chose.
3. Sends that content with your prompt to the AI provider you selected (Gemini / OpenAI / Anthropic).
4. Displays the response.

The entire pipeline runs in your browser. We don't have a server in the middle of this flow in the free version.

2. Data we collect, process, store, and transmit

2.1 What we collect

The extension collects the following categories of data only when explicitly triggered by you (clicking "Summarize" or similar):

• Website content — the text of the page, video transcript, or PDF you choose to summarize. Used immediately to generate the summary, then discarded by us.
• API keys you paste into the settings — stored locally on your device only.
• User preferences — your selected language, model, summary length, and theme.

We do not collect: name, email (in v1.0.x free build), IP address, geolocation, browsing history beyond pages you summarize, personal communications, financial information, or any data for advertising purposes.

2.2 How we process the data

Processing happens in two places:

• In your browser — the extension fetches the page content, parses it locally (Readability-style HTML extraction or transcript parsing), and prepares the prompt.
• At the AI provider you selected (Google Gemini, OpenAI, or Anthropic) — the prepared prompt + content is sent to their API to generate the summary. Their processing is subject to their own privacy policy (linked in section 3).

We, the extension developer, do not have a server in this pipeline. We never see your content or your API keys.

2.3 How we store the data

• chrome.storage.local — settings, API keys, and last 50 summary records are stored locally on your device. This data never syncs to any server. You can clear it any time via chrome://extensions/ → details → "Site data".
• chrome.storage.session — for the Q&A chat, the extracted source text + recent messages stay in session memory. Cleared the moment you close the browser.
• Retention period — local history is capped at 50 entries (oldest dropped automatically). Session chat data is wiped on browser close. You can delete individual entries on the History page, or clear all stored data any time via chrome://extensions/ → details → "Site data".
• Bridge-health diagnostics (only if you use browser-session mode) — success/failure of writing into your logged-in AI tab, kept locally so a broken bridge is skipped for 24h.

2.4 How we transmit the data

• Content you choose to summarize is transmitted directly from your browser to the AI provider's API endpoint (e.g. generativelanguage.googleapis.com, api.openai.com, api.anthropic.com) over HTTPS.
• We do not intercept, log, or proxy this traffic.
• We do not transmit data to our own servers — there are none in this version.
• We do not share data with third parties beyond the AI provider you explicitly chose.

2.5 Account features (disabled in v1.0.x free build)

This version of the extension does not require, offer, or expose any sign-in or account creation. There is no Pro tier active. The codebase contains optional account scaffolding for future versions, but it is not reachable through the user interface in this build.

3. Legacy storage details

On your device (chrome.storage.local — never leaves your computer)

• Your selected AI provider, model, language, length, and other preferences.
• The API keys you pasted, if any. Stored locally only. We never see them.
• Your last 50 summaries (local history). Editable, deletable.

On your device (chrome.storage.session — cleared when you quit the browser)

• For the Q&A follow-up chat: the extracted source text plus a short message log of the page you just summarised. Cleared on browser close.

On our infrastructure (Supabase) — only if you sign in

• Your email address.
• Your subscription state mirrored from the billing provider (status, plan, renewal date).
• Optional: synced summary history. You can delete this at any time from Settings → Account → Delete history.

We do not store: your IP address (Supabase logs are kept under their infrastructure, subject to Supabase's policy); browsing history other than what you actively summarise; content of any page you didn't trigger a summary on.

3. Third parties

When you ask for a summary, page content goes directly from your browser to the AI provider you selected. We don't proxy it in the free version.

If you use browser-session mode instead of an API key, the prompt is typed into your already-logged-in tab on gemini.google.com / chatgpt.com / claude.ai. In that case the prompt goes to the provider under your own account, exactly as if you had typed it manually — we never see it, and no API key is used.

4. Permissions justification

5. Your rights

• Delete your account and all stored data — Settings → Account → Delete account. Cascades to subscriptions, usage, and history.
• Export your data as JSON from Settings → Account → Export.
• Cancel your subscription at any time via the billing portal. You retain Pro access until the end of the paid period.
• Revoke API keys in your provider's dashboard; we have no copy.

For EU users: data is processed under GDPR Article 6(1)(b) — performance of a contract — for account/subscription data, and Article 6(1)(a) — consent — for optional history sync.

6. Cookies and tracking technologies

The extension does not set, read, or use cookies of any kind. It does not use:

• HTTP cookies
• Local storage cookies
• Tracking pixels or web beacons
• Fingerprinting techniques
• Cross-site tracking identifiers

The only browser-storage APIs used are chrome.storage.local (preferences, history) and chrome.storage.session (transient chat state). Both are scoped to the extension and not accessible to any website.

7. Analytics and advertising

The extension contains zero analytics. No Google Analytics, no Mixpanel, no Amplitude, no Hotjar, no Segment, no custom telemetry. We do not measure clicks, impressions, sessions, or any behavioral metric. There is no remote logging endpoint.

The extension contains zero advertising. No ad networks, no sponsored content, no affiliate tracking, no retargeting tags.

8. Children's privacy (COPPA)

The extension is not directed at children under 13 years of age, and we do not knowingly collect personal information from children. If a parent or guardian believes that a child has provided us with information, please contact m.nazar77@gmail.com and we will promptly take steps to delete such information from our systems (although, as documented above, no personal data is collected in this version).

9. Data categories — full disclosure table

7. Changes to this policy

Material changes will be announced in the extension's release notes and updated here. The Last updated date at the top reflects the most recent revision.

8. Contact

Privacy questions, deletion requests, or data export: m.nazar77@gmail.com