Privacy Policy

1. Introduction

CommentCraft ("we," "our," or "the extension") is a browser extension designed to help users generate AI-powered comment suggestions for Twitter/X and LinkedIn posts. This Privacy Policy explains how we handle your information and protect your privacy.

Our Core Principle: We believe in privacy by design. CommentCraft operates entirely on your local device without collecting, storing, or transmitting your personal data to any external servers.

2. Data Collection

2.1 What We DO NOT Collect

CommentCraft does NOT collect, store, or transmit:

• Personally identifiable information (name, email, address, phone number)
• Authentication credentials or passwords
• Financial or payment information
• Location data or IP addresses
• Browsing history or web activity across websites
• Social media posts, comments, or messages
• User behavior analytics or tracking data
• Any data from Twitter/X, LinkedIn, or ChatGPT

2.2 What We Store Locally

The extension stores the following data locally on your device only using Chrome's storage API:

• User Preferences: Comment tone (Professional, Friendly, etc.), target audience, engagement goals
• Feature Settings: Auto-analyze posts toggle, show engagement scores toggle, daily comment goal number
• Progress Tracking: Daily comment count, engagement streak (stored locally for your dashboard)

Important: This data never leaves your browser and is not accessible to us or any third party.

3. Data Storage

3.1 Local Storage Only

All data is stored locally using Chrome's chrome.storage.local API. This means:

• Data is stored only on your device
• Data is not synced across devices
• Data is not accessible to CommentCraft developers
• Data is not transmitted to any external servers
• Data remains under your complete control

3.2 Data Retention

Your settings and preferences are retained locally until you:

• Uninstall the CommentCraft extension, or
• Clear your browser's extension data, or
• Manually reset settings within the extension

4. How We Use Your Data

The locally stored data is used exclusively to:

• Personalize prompts: Create ChatGPT prompts based on your selected tone, audience, and goals
• Remember settings: Maintain your preferences across browser sessions
• Track progress: Show you your daily comment count and engagement streak in the dashboard
• Improve experience: Enable/disable features based on your settings

All processing happens locally on your device. No data is sent to external servers for analysis, storage, or any other purpose.

5. Third-Party Services

5.1 ChatGPT Integration

CommentCraft opens ChatGPT (chatgpt.com) in a new browser tab with a pre-filled prompt. Important notes:

• We do NOT send data to ChatGPT via API
• We do NOT have access to your ChatGPT account or conversations
• The prompt is visible to you before being sent to ChatGPT
• Your interaction with ChatGPT is governed by OpenAI's privacy policy, not ours
• You maintain full control over what is sent to ChatGPT

5.2 Social Media Platforms

CommentCraft operates on Twitter/X and LinkedIn but:

• Does NOT collect your social media data
• Does NOT access your account credentials
• Does NOT post on your behalf
• Only reads publicly visible post content to generate prompts
• Does NOT store or transmit post content anywhere

5.3 No Analytics or Tracking

We do NOT use:

• Google Analytics or any analytics services
• Tracking pixels or cookies
• Telemetry or usage statistics
• Error reporting services that transmit data

6. Extension Permissions

CommentCraft requests the following permissions and uses them exclusively for the stated purposes:

6.1 Storage Permission

Purpose: Store user preferences and settings locally in your browser.

Usage: Save comment tone, target audience, engagement goals, feature toggles, and daily progress.

6.2 Scripting Permission

Purpose: Inject CommentCraft buttons and UI elements into Twitter/X and LinkedIn pages.

Usage: Add interactive buttons to posts, display engagement scores, and enable keyboard shortcuts.

6.3 Host Permissions

twitter.com & x.com: Access Twitter/X pages to add CommentCraft functionality to posts.

linkedin.com: Access LinkedIn pages to add CommentCraft functionality to posts.

chatgpt.com: Auto-fill prompts in ChatGPT's input field for seamless user experience.

No Other Sites: CommentCraft does not access any other websites.

7. Your Rights and Control

You have complete control over your data:

7.1 Access Your Data

All your data is stored locally in your browser. You can view it anytime by:

• Opening the CommentCraft extension popup and viewing the Settings tab
• Using Chrome DevTools to inspect chrome.storage.local

7.2 Modify Your Data

You can change your settings anytime through the CommentCraft popup interface.

7.3 Delete Your Data

You can delete all CommentCraft data by:

• Uninstalling the extension (removes all stored data), or
• Clearing your browser's extension data, or
• Using the "Reset Settings" option in the extension (if available)

7.4 Export Your Data

Since all data is stored locally, you can export it manually using Chrome DevTools if needed.

8. Data Security

We take security seriously:

• Local-Only Storage: No data leaves your device, eliminating transmission risks
• No External Servers: We don't operate any servers that could be compromised
• No Data Collection: We can't lose data we don't collect
• Open Source: Our code is transparent and can be reviewed for security
• Minimal Permissions: We request only essential permissions needed for functionality

Your data security depends on your browser's security. We recommend keeping Chrome updated and using strong device passwords.

9. Children's Privacy

CommentCraft is not intended for use by children under 13 years of age. We do not knowingly collect data from children. Since we don't collect any personal information, we cannot inadvertently collect children's data.

If you believe a child has used CommentCraft, you can simply uninstall the extension to remove all locally stored data.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Last Updated" date at the top of this policy.

Material changes will be communicated through:

• An update notice in the extension
• The Chrome Web Store listing
• This privacy policy page

Your continued use of CommentCraft after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:

• GitHub Issues: Report issues or ask questions on our GitHub repository
• Chrome Web Store: Leave feedback on our extension listing

We will respond to privacy inquiries within a reasonable timeframe.

12. Legal Compliance

This Privacy Policy complies with:

• GDPR (General Data Protection Regulation): We don't collect personal data, so GDPR processing requirements don't apply
• CCPA (California Consumer Privacy Act): We don't sell personal information because we don't collect it
• Chrome Web Store Developer Program Policies: We fully disclose our data practices