Privacy Policy

Last updated: August 16, 2026

1. Data Collection

The "Superpower for ChatGPT" Chrome Extension is primarily a client-side application. We do not automatically collect, store, or transmit your personal information, chat content, or browsing history. Separately, if you choose to subscribe to the newsletter, either on this website or from inside the extension, we collect the email address you enter. See Section 12.

2. Data Storage

All user data generated by the extension (such as saved prompts, saved chains, saved folders, per-chat notes, usage counts, and settings preferences) is stored locally on your device using the browser's chrome.storage.local and chrome.storage.sync capabilities. Data placed in chrome.storage.sync may be synced across your own devices if you have Chrome Sync enabled, but it is not accessible to the developer.

Optionally, if you have a Pro license, you may also enable Google Drive Sync to back up and sync some of this data to a hidden app-specific folder in your own Google Drive. This feature is off by default and is described in Section 6.

3. Website Interactions

The extension interacts with chatgpt.com to provide features such as Prompt Optimization, Usage Counter, Message Queue, Message Timestamps, Folders, and Chat Export. These interactions occur strictly within your browser using your existing ChatGPT session.

• Prompt Optimization: Your prompt is temporarily copied to a hidden background tab opened on chatgpt.com (in temporary-chat mode) within your own browser session to generate an optimized version. It is never sent to any external server owned by the developer.
• Usage Counter: The extension counts messages you send from this browser by observing successful POSTs to ChatGPT's own conversation endpoint via a local fetch wrapper. Counts are stored locally in chrome.storage.local and never transmitted externally.
• Message Queue: The extension monitors ChatGPT's streaming state locally (by watching for the stop button) to detect when a response has finished generating, so it can automatically send the next queued message. No network data is collected or transmitted externally.
• Message Timestamps: The extension reads create_time values from ChatGPT's own conversation API responses to label each assistant turn with its server timestamp. All processing happens locally in your browser.
• Folders & Chat List: To list your conversations inside the Folders modal, the extension reads from ChatGPT's own /backend-api/conversations endpoint using your existing session. The chat list is cached in memory and is never sent to the developer. If you enable the optional Google Drive Sync feature (Section 6), your folder structure and the cached titles of the chats you have filed into folders are included in the backup stored in your own Google Drive.
• Chat Export: The extension reads conversation data from ChatGPT's own conversation API (for Markdown) or uses the browser's built-in print dialog (for PDF). All processing happens locally in your browser.

4. Permissions

The extension requests the following browser permissions:

• storage: To save your settings, prompts, chains, folders, and preferences locally.
• tabs: To interact with the chatgpt.com tab and manage the hidden background tab used for prompt optimization.
• scripting: To inject interface enhancements and to drive the prompt-optimization worker tab.
• alarms: To schedule periodic license validation checks.
• identity (optional): Requested only if you choose to enable Google Drive Sync, in order to obtain a Google OAuth2 token limited to the drive.appdata scope. It is never requested at install, and never granted unless you explicitly connect your account, as described in Section 6.
• Host access to chatgpt.com: To inject the interface enhancements and read page content (DOM and ChatGPT's own API responses) on chatgpt.com, as described in Section 3.
• Optional host permission for api.lemonsqueezy.com: Requested only at the moment you activate a license key, for the optional premium features described in Section 5. If you never activate a license, this permission is never granted or used.

5. Premium Licensing (Pro Features)

If you choose to activate a premium license key, the extension communicates with LemonSqueezy (a third-party payment and licensing platform) to validate your license. This involves sending your license key to api.lemonsqueezy.com for activation, periodic validation, and deactivation. This communication only occurs if you voluntarily enter a license key. No personal payment information is handled by the extension itself — all purchases are processed directly by LemonSqueezy through their website.

6. Google Drive Sync (Optional, Pro Only)

If you enable Google Drive Sync in the extension settings (a Pro-only feature), the extension requests a Google OAuth2 token scoped exclusively to drive.appdata. This scope only allows access to a hidden, app-specific folder of your own Google Drive — it cannot read your personal files, photos, or other Drive content.

• What is synced: A single file (superpower_chatgpt_folders.json) in that hidden folder holds your saved folders, saved prompts, prompt chains, per-chat notes, the cached titles of the chats you have filed into folders, and the deletion records used to propagate removals across your devices.
• What is NOT synced: Your ChatGPT conversation content is never uploaded. Your usage counts and your extension settings are not included in the Drive backup either.
• Who can see it: This data is transmitted only between your browser and your own Google Drive account. The developer has no access to it and operates no server that receives it.
• Opt-in and revocable: Sync is off by default, and the identity permission is not requested at install — both are requested only at the moment you explicitly connect your account. You can disconnect at any time from the extension settings, which revokes the OAuth token. The backup file remains in your own Drive under your control until you delete it.

7. Bug Reporting & Feature Proposals

The extension provides "Report a Bug" and "Propose a Feature" buttons that open Google Forms.

• Report a Bug: Automatically pre-fills your Extension Version and User Agent (browser/OS details) into the form URL.
• Propose a Feature: Automatically pre-fills your Extension Version into the form URL.
• Voluntary Submission: This data is only transmitted to Google Forms if you manually click "Submit." Simply opening the form does not send any data to the developer.
• Purpose: This information is used solely for troubleshooting bugs and prioritizing feature development.

8. Uninstall Feedback

When the extension is uninstalled, your browser may open a feedback form. The only data included automatically in the URL is the extension version number. No personal information is transmitted. Submitting the form is entirely voluntary.

9. Third-Party Services

This extension enhances the user interface of ChatGPT by OpenAI. It is not affiliated with OpenAI, Inc. The extension functions by injecting custom interface elements, managing local storage for organization, and automating specific user actions on the ChatGPT website. The following third-party services are used:

• ChatGPT (chatgpt.com): The target website the extension enhances. All page interactions occur locally in your browser using your existing session.
• LemonSqueezy (api.lemonsqueezy.com): License key validation for optional premium features, as described in Section 5. Only contacted when a license key is provided.
• Google Drive (googleapis.com, OAuth scope drive.appdata): Optional Pro-only sync of your folders, prompts, chains, and notes to a hidden app-specific folder in your own Google Drive, as described in Section 6. Only contacted when you explicitly connect Drive Sync.
• superpowerforai.com: Our own website. The extension contacts it only when you submit the optional newsletter signup, and the request carries only the email address you typed. See Section 12.
• Sender (sender.net): Email marketing provider for the newsletter described in Section 12. The extension never contacts it directly; a signup made inside the extension goes to our website, which passes it to Sender.

10. Data Management & Liability

The extension interacts with the ChatGPT web interface to provide features such as prompt optimization, message queueing, chat export, usage tracking, message timestamps, folders, and prompt/chain libraries. While we strive for reliability, the software is provided "as is." The developer is not responsible for any data loss, unintended modifications, or disruption of functionality caused by network errors, changes to the ChatGPT user interface, browser updates, or user error.

11. Data Retention

Locally stored data (folders, prompts, chains, settings, chat notes, usage counts) remains on your device until you delete it from within the extension or uninstall the extension. License validation records sent to LemonSqueezy are retained according to LemonSqueezy's own retention policy. Disconnecting Google Drive Sync revokes the OAuth token; the synced backup file in your Drive's app-data folder remains under your control and can be deleted from your Google Drive at any time. Newsletter addresses are covered separately in Section 12.

12. Newsletter

This section covers the newsletter signup, which lives in three places: the form on superpowerforai.com, the mail button in the extension's settings popup, and the form at the bottom of the welcome page the extension opens after install. All three are optional and work the same way: nothing happens until you type your email address and submit it.

• What we collect: Only the email address you type in, and which product's list you submitted it from. Nothing is pre-filled, and neither the website nor the extension reads an address from your browser.
• Why: To send occasional updates about Superpower for ChatGPT: breakage alerts, new features, and subscriber deals, roughly once a month.
• Legal basis: Your consent, given when you submit the form. You can withdraw it at any time, and withdrawing it does not affect anything else.
• Who processes it: Sender (sender.net), an email marketing provider, stores the list and delivers the emails on our behalf. Your address is never sold, rented, or shared with anyone else. The submission, from any of the three forms, passes through our site on Cloudflare Pages before reaching Sender.
• Withdrawing consent: Every email includes a one click unsubscribe link. You can also email us and ask to be removed.
• Retention: We keep your address until you unsubscribe or ask us to delete it, whichever comes first.

13. Contact

If you have questions about this policy, you can contact the developer at [email protected].