Privacy Policy

AI Gloss Tab v0.1.0 · Last updated: 2026-04-18

TL;DR

AI Gloss Tab does not collect, store, or transmit any user data to any remote server. All features run entirely in your browser. Your AI conversation content never leaves your device.

What We Don't Do

No collection of your AI conversation content, prompts, or AI responses
No collection of account info, email addresses, IP addresses, or geolocation
No use of cookies, LocalStorage, or other web tracking technologies
No calls to any remote APIs; no communication with any external server
No use of Google Analytics, Sentry, Mixpanel, or any analytics/telemetry tools
No display of any advertisements
No user profiling, behavioral analysis, or A/B testing
No selling, renting, or sharing user data with any third party

What We Store Locally

The extension uses the standard chrome.storage API to save data locally on your device. This data is not synced, not uploaded, and exists only within your current browser profile.

1. User Preferences (`chrome.storage.local`, persistent)

Field	Purpose	Example
`theme`	Theme preference	"system" / "light" / "dark"
`lang`	UI language	"zh" / "en"
`components.*`	Feature toggles (timeline, copy, pet)	true / false
`railPosition.*`	Timeline position (side, offset, center)	"right", 60, 50

2. Gloss Pet Companion State (`chrome.storage.local`, persistent)

Field	Purpose
`petId`, `mood`, `rerollsLeft`	Companion identity and mood
`cooldownUntil`, `hatched`	Reroll cooldown, hatching state
`position`, `personalitySeed`	Drag position, behavior seed

Contains no personal information or conversation content.

3. Platform Diagnostic (`chrome.storage.session`, temporary)

DOM selector pass/fail status and platform name only. Cleared when browser closes.

4. Diagnostic History Summary (`chrome.storage.local`)

Scoring summaries only (date + score + platform). No full diagnostic data stored.

Data Retention and Deletion

Scenario	Behavior
Uninstall extension	Chrome automatically deletes all extension data
Close browser	`chrome.storage.session` data cleared automatically
Manual deletion	Chrome Settings → Privacy → Clear browsing data → Advanced

We retain no copies of deleted data — our servers hold nothing.

Content Script Behavior

Runs on 9 AI platforms: ChatGPT, Claude, Gemini, DeepSeek, Kimi, Tongyi Qianwen, Doubao, Tencent Yuanbao, Baidu Yiyan.

Does:

Reads page DOM (conversation containers only, not sidebar/account/nav)
Injects UI via Shadow DOM (fully style-isolated)
Local format conversion + navigator.clipboard on copy button click
Runs selector diagnostics (results in chrome.storage.session)

Does NOT:

Transmit conversation content over the network
Upload DOM structures to any server
Access other tabs or unrelated pages
Modify the AI platform's original content
Read account info or login credentials
Intercept, modify, or re-send network requests

Permissions

Permission	Purpose
`activeTab`	Detect current URL to check if on a supported AI platform
`storage`	Save preferences, companion state, diagnostic reports
`host_permissions`	Content script injection on 9 AI platform domains

Does NOT request: tabs, cookies, history, downloads, webRequest, webNavigation, identity, management, notifications, geolocation.

Third-Party Resources

All bundled locally, no CDN or remote calls:

Resource	License
Fraunces, Quicksand (fonts)	SIL OFL 1.1
KaTeX (formula rendering)	MIT
MathJax (formula fallback)	Apache 2.0
html2canvas-pro (screenshots)	MIT

Data Security

Zero network transmission: no connections, no leakage channel
Shadow DOM isolation: host page JS cannot read extension state
Open source: full code on GitHub (MIT), auditable
Least privilege: only essential Chrome permissions requested

Children's Privacy

Not directed at children under 13. Collects no data from anyone.

Your Rights

Since we collect no personal data, GDPR/CCPA rights (access, rectification, erasure, portability) are self-fulfilled. You hold the only copy in your browser. View via DevTools, modify in Popup, delete by uninstalling.

Changes to This Policy

Updates will revise the "Last Updated" date and be noted in CHANGELOG.md. Material changes (e.g., introducing network transmission) will be prominently noted in extension update descriptions.

Governing Law

Governed by PRC law. GDPR/CCPA obligations are factually inapplicable as no personal data is collected.

Contact

Email: glosstabbug@foxmail.com
GitHub: Issues

中文版

完整中文版隐私政策请参见扩展源码中的 privacy-policy.md。核心要点：

零数据收集：不收集对话内容、账号信息、IP 地址
零网络传输：不调用任何远程 API，不与外部服务器通信
纯本地存储：仅在 chrome.storage.local 保存偏好和伴侣状态
开源可审计：MIT 许可证，代码公开
最小权限：仅 activeTab + storage + 9 平台 host_permissions

联系方式：glosstabbug@foxmail.com