Privacy
The extension collects nothing, because it has nowhere to send it.
What is collected
Nothing. The extension has no analytics, no telemetry, no remote endpoint, and no account. It never sends a request anywhere.
What is stored
A single boolean — whether the button should flash once when it appears — kept in Chrome's own synced settings storage. It never leaves your Google account, and we cannot read it.
What it can see
The content script runs only on chatgpt.com, chat.openai.com, claude.ai, gemini.google.com, grok.com and google.com/search. It reads the page text to find the disclaimer sentence and rewrites it. Your conversations are never copied, stored, or transmitted.
Permissions
Only `storage`, used for the setting above. No host permissions beyond the six sites listed in the manifest.
ai-mistakes.org
The website is separate from the extension. Visits are counted with Umami, proxied through this domain. Each request sends the page address and title, the site that linked you here, and your browser language and screen size; from your IP address and user agent Umami derives a country, a browser, an operating system and a device type, along with the hash that stands in for a session. It sets no cookies, names nobody, and follows nobody across sites. Clicks on the download and install buttons are recorded the same way. To stop an automated flood running up the analytics bill, the endpoint that receives these events counts them per visitor, keyed by a one-way hash of your IP address and browser; Upstash Redis holds that counter for about two hours and it is never joined to the analytics data.
Launch notification on ai-mistakes.org
The launch-notification wishlist is a feature of ai-mistakes.org and is completely separate from the Chrome extension. The extension never collects, receives, reads, or transmits your email address. The website uses double opt-in. Cloudflare Turnstile checks the signup for abuse, and Resend processes the address to deliver the confirmation email. Open and click tracking are disabled for these emails. The address becomes a Resend contact only after you explicitly confirm it. We send no newsletter: only one launch notification when the paid version is ready. Upstash Redis holds separate keyed hashes of the address and client IP for a seven-day resend cooldown and a short abuse-prevention rate limit; it never receives the address, IP, or confirmation token. You can request deletion at hello@ai-mistakes.org. Confirmed contacts will be deleted within 30 days after the launch mailing is complete.
Changes
If this ever changes, it changes in public — the extension is open source and every version is tagged on GitHub.