1.What the extension does#
The PromptAbide extension has one purpose: to help you publish a prompt, and the result it produced, from the AI tool you used to PromptAbide. This policy covers the extension only. The main Privacy Policy covers your account and the website, and applies to anything you publish.
In one paragraph
The extension reads an AI tool’s page only when you open its share sheet. It checks what it found on your device for secrets and personal data. It sends that text to PromptAbide to suggest what to share, and publishes only what you confirm. It does not track your browsing, it does not read other sites, and it does not sell or share your data.
2.Where it runs#
The extension runs only on these AI tools, and on promptabide.com:
ChatGPT · Claude · Gemini · Google AI Studio · NotebookLM · Google Labs · Perplexity · Grok (grok.com and x.com) · Microsoft Copilot · DeepSeek · Mistral Le Chat · Poe · Midjourney · Discord channels (for Midjourney and similar bots) · Ideogram · Leonardo · Adobe Firefly · Krea · Runway · Suno · v0 · Lovable · Bolt
You can ask it to work on another site. It will then ask your browser for optional permission to access that site, and Chrome will show you the request. It never gets access to all sites unless you grant it, and you can remove that permission at any time from the extension’s settings in your browser.
On a supported site it runs inside the page so it can show its Share button and notice when a response has finished. This happens on your device. It does not record or send what you type, read or generate unless you open the share sheet.
3.What it reads, and when#
When you open the share sheet, the extension reads from the current page:
- your prompts in the current conversation;
- the AI tool’s responses (text, code or documents);
- images, video or audio the tool generated, if any; and
- the tool and model name, where the page shows it.
It does not read your passwords, payment details, other tabs, your browsing history, or pages on sites it does not support.
4.The secret and personal-data check#
Before anything is published, the extension scans the prompt and output on your device for things that should not be made public. If it finds something that looks like an API key, access token or private key, it stops the first Publish and asks you to redact it. If it finds personal data such as an email address or phone number, it warns you and offers to redact it. The check is automatic but not perfect, so please read what you are about to publish.
5.What leaves your device#
| When | What is sent | Where |
|---|---|---|
| You sign in | Your existing promptabide.com login cookie, exchanged once for an extension session. The session is recorded as a device in your account, with IP address and browser details. | PromptAbide API |
| You open the share sheet (if AI suggestions are available) | The text of up to 12 prompts and outputs found on the page, and model hints, so the best one can be preselected and a title, summary, topics and keywords suggested. Also sent when you ask for a rewrite or more details. Not stored by us after the suggestion is returned. | PromptAbide API, then Google Gemini API |
| You press Publish | The prompt, output, details and any media you chose, exactly as shown in the share sheet. This becomes a public bide under your account. | PromptAbide API; media is uploaded directly to Cloudinary |
| Occasionally | A request for the current list of supported AI tools. It contains no personal data. | PromptAbide API |
AI suggestions work in two steps: the extension sends the text to the PromptAbide API, and our server sends it on to Google’s Gemini API to write the suggestion. The extension never talks to Google directly. Google may process text sent to Gemini and, depending on the service tier we use, may use it to improve its services; Google’s own terms govern that, not ours. The AI section of the Privacy Policy explains this. If AI suggestions are not available, nothing is sent until you press Publish.
The extension sends no analytics: no usage tracking, telemetry or crash reports, and no third-party analytics or advertising code runs in it.
6.What it stores on your device#
In your browser’s extension storage (chrome.storage.local), which only the extension can read:
- your extension session token and a random device ID, so you stay signed in;
- a copy of your basic profile (username, name, picture), to show who you are signed in as;
- your extension settings, such as sites you have muted, and whether you agreed to the disclosure screen; and
- a cached list of supported AI tools.
Signing out on the website or in the extension removes the session. Uninstalling the extension removes all of it.
7.Permissions and why it needs them#
| Permission | Why |
|---|---|
storage | Keep your session, settings and the tool list on your device. |
cookies | Read the promptabide.com login cookie once, to sign the extension in without a separate password. |
scripting | Add the Share button to a supported AI tool, or to a site you enabled yourself. |
activeTab | Capture from the tab you are using when you click the extension. |
contextMenus | Offer “Share to PromptAbide” in the right-click menu. |
| Access to the listed AI sites | Read the conversation when you open the share sheet. |
| Access to promptabide.com and Cloudinary | Talk to our API and upload media you chose to publish. |
| Optional access to all sites | Only if you ask it to work on an unsupported site and approve Chrome’s prompt. |
8.How we use this data#
What we do with data received from the extension:
- we use it only to provide the extension’s single purpose, publishing to PromptAbide, and features you can see;
- we do not sell it, and we do not transfer it except to the service providers needed for that purpose (Cloudinary for media, and Google Gemini for AI suggestions, as described above), to comply with the law, or as part of a merger or sale with notice to you;
- we do not use or transfer it for advertising, including personalised advertising;
- we do not use or transfer it to determine creditworthiness or for lending; and
- no person reads it unless you agree, it is needed for security or abuse investigations, it is required by law, or it is aggregated and anonymised for internal operations. Content you publish is public by design.
These are our commitments for the extension, written with the Chrome Web Store User Data Policy in mind. What Google does with text sent to Gemini is set by Google’s terms for the tier we use, which we do not control.
9.Changes and contact#
If we change what the extension collects, we will update this page and, for significant changes, ask for your agreement in the extension first. Questions: hello@promptabide.com.