PromptPolishPrivacy Policy
This policy explains what the PromptPolish Chrome extension and the optional PromptPolish for Windows app ("PromptPolish", "we", "us") do with your information. It is written to be read, not skimmed past, because your prompts can be confidential.
The short version
By default, your text never leaves your device. We have no servers that receive your prompts, no accounts, no analytics, no telemetry and no ads. We do not sell or share your data.
The only time text is sent anywhere is if you turn on the optional cloud mode with your own API key. Then it goes to the AI provider you picked, and nowhere else.
1. What PromptPolish processes
To do its job, PromptPolish reads the text you type in a prompt box (a text area, text input or rich-text editor) on the websites you have allowed. It checks that text for mistakes, shows suggestions, and, when you ask, rewrites, translates or fixes it.
- It only runs on the sites in your allow-list (by default ChatGPT, Claude, Gemini, Copilot, Perplexity, DeepSeek and Grok). You can add or remove sites in Settings.
- It does not read password fields, payment or login forms, or inputs that are not recognised prompt editors.
- It does not read your chat history, other page content, cookies or browsing history.
2. What stays on your device
| Feature | Where it runs | Leaves your device? |
|---|---|---|
| Grammar, spelling and clarity checks; Alt+G | Harper, a grammar engine bundled with the extension (WebAssembly in a local Web Worker) | No |
| Rewrite, translate, elite prompt (default) | Chrome's built-in on-device AI model, managed by Chrome | No, from PromptPolish's side |
| Your settings, site list, dictionary | Chrome extension storage on your device | No |
Chrome downloads and updates its on-device model itself, under Google's terms. PromptPolish only checks whether it is available and, when you click, asks Chrome to download it.
3. Optional cloud mode
Cloud mode is off by default. You can turn it on in Settings by choosing "Local + my own API key", granting the provider's access, and pasting your own API key. Supported providers are OpenAI, Anthropic and Google (Gemini API).
- Text is sent from your browser directly to the provider you selected. It does not pass through any server of ours.
- It is sent only when you choose the cloud engine in the rewrite panel and click the send button, or, if you separately enable "use cloud for shortcuts" in Settings, when you press Alt+T or Alt+U. Grammar fixes with Alt+G never use the cloud.
- Before sending, code, URLs, file paths, numbers, quoted text and placeholders are replaced by markers on your device and are not sent.
- The provider handles the text under its own terms and privacy policy, which we do not control. Please read them. You pay the provider directly for your API usage.
- Your API key is stored on your device only, is used only by the extension's background service worker, is not readable by web pages, and is never sent to us.
You can turn cloud mode off and remove your key at any time in Settings.
4. What is stored
PromptPolish stores the following in Chrome's local extension storage, on your device only:
- Your settings (enabled sites, tone, English variant, shortcut preferences).
- Your personal dictionary (words you added).
- Your API key, only if you add one.
Your prompt text is held in memory while it is being checked. A small in-memory cache of recently checked paragraphs lives in the extension and is discarded when the extension's background page closes. Prompts are not written to disk, not logged and not kept in history. Uninstalling the extension removes all of this.
5. Browser permissions and why
| Permission | Why |
|---|---|
| Access to the listed AI sites | So PromptPolish can read the prompt box and show suggestions there. |
| storage | Save your settings, dictionary and optional key; read IT policy. |
| offscreen | Run the local grammar engine and on-device AI, which cannot run in the extension's background worker. |
| scripting, activeTab | Attach to the sites you allowed and enable the extension on the current tab at your request. |
| Optional access to other sites | Requested only when you add a site or enable cloud mode for a provider. You can revoke it. |
| Keyboard shortcuts | Alt+G, Alt+T, Alt+U and Alt+Shift+P. |
6. PromptPolish for Windows
The optional Windows app lets you use the same shortcuts in other apps, such as the Claude desktop app. To replace your text it temporarily uses the clipboard: it saves your clipboard, copies your selected text, processes it, pastes the result and restores your clipboard.
- Grammar fixes run on your PC and send nothing anywhere.
- Translate, polish and elite prompt are off until you choose a provider (OpenAI, Anthropic, Gemini, or Ollama running on your own PC) and confirm that your text will be sent to it. Cloud requests happen only when you press the shortcut, with code, URLs, numbers and quotes masked first.
- API keys are encrypted with Windows (DPAPI) and stored only on your PC. Prompt text is not logged. There is no telemetry and no update check.
- The app has no access to your files, and the keystroke helper never sees your text.
7. What we do not do
- We do not collect, receive, store or sell your prompts or any personal information.
- We do not use analytics, advertising, tracking pixels, fingerprinting or crash reporting.
- We do not use your data to train any model.
- We do not use or transfer data for purposes unrelated to PromptPolish's single purpose of improving the text you write, and we do not use it to determine creditworthiness or for lending.
- We do not load or run code from remote servers. All code is bundled with the extension.
Because we receive no personal data, we have nothing to share with third parties, sell or disclose to authorities.
8. Organisations and IT policy
Administrators can use Chrome enterprise policy to disable PromptPolish, force local-only mode (disabling cloud mode), lock the list of sites, and provide an organisation dictionary. These settings are read from Chrome's managed storage. If you use PromptPolish on a work device, your organisation's policies may apply as well.
9. Your choices and rights
- Turn PromptPolish off globally or per site from the toolbar popup or Settings.
- Clear your dictionary, remove your API key or switch back to local-only mode in Settings.
- Revoke optional site permissions in Chrome's extension settings.
- Uninstall the extension to remove everything it stored.
Because we hold no personal data about you, there is nothing for us to access, correct or delete. If you are in a region with data protection rights (for example the EU, UK or California) and want to ask a question, contact us below. For text you chose to send to an AI provider in cloud mode, exercise your rights with that provider.
10. Children
PromptPolish is a general-purpose writing tool and is not directed to children under 13. We do not knowingly collect information from anyone.
11. Changes to this policy
If we change what PromptPolish does with data, we will update this page and its "Last updated" date before the change takes effect, and describe material changes in the extension's release notes. Cloud features will never be switched on for you without your consent.
12. Contact
Questions about privacy? Email [[CONTACT EMAIL]].
Publisher: [[OWNER NAME]], [[OWNER ADDRESS OR COUNTRY]].