Feature
A privacy-first AI chat extension with one permission
A small behavior-changing extension should have a small data and permission surface.
Extension data flow
| Data or capability | Behavior |
|---|---|
| Conversation text | Read only in the page as needed to locate supported UI state; not copied to a developer server |
| Disclaimer text | Matched and rewritten in the current page |
| Flash preference | One boolean stored through Chrome synced storage |
| Analytics or telemetry | None in the extension |
| Account | No Makes Mistakes account |
| Remote API | No extension endpoint for processing conversations |
Why it still runs on chat domains
A content script needs explicit host matches to modify the supported pages. The manifest lists the ChatGPT, Claude, Gemini, Grok, and Google Search hosts where the feature operates.
Host access is not the same as server transmission. The relevant questions are what code runs, what it reads, what it stores, and where data is sent. The source and manifest are public so those claims can be inspected.
The website is a separate surface
Visits to ai-mistakes.org can be counted with Umami through a same-domain proxy, and install or download clicks can be tracked. The website privacy page describes the fields involved and the optional email wishlist flow.
That website behavior does not add analytics to the installed extension. Keeping the two surfaces explicit avoids the vague claim that the entire project collects nothing everywhere.
A browser-extension privacy checklist
- Read the current manifest permissions and host matches.
- Check whether conversation content leaves the browser and which server receives it.
- Look for analytics SDKs, remote configuration, and update-time changes.
- Confirm what is stored locally or synced through the browser account.
- Review the publisher, source code, release history, and privacy disclosure together.
- Remove extensions you no longer use and periodically re-check permissions.
FAQ
Questions people ask
Does Makes Mistakes collect my ChatGPT conversations?
No. The extension has no analytics, telemetry, account, or remote endpoint, and does not copy conversations to the developer.
What does the storage permission do?
It stores one boolean controlling whether the Improve answer button flashes once when it appears. Chrome's synced storage may carry that preference through your Google account.
Does the website collect the same data as the extension?
No. The website is separate and may count visits and CTA clicks with cookieless Umami analytics as described in the privacy policy. The extension itself has no analytics.