Privacy Policy

Last updated: October 24, 2026

The "Superpower for NotebookLM" Chrome Extension and the website superpowerforai.com are operated by SulfurByte ("we", "us", "the developer").

1. Data Collection

The "Superpower for NotebookLM" Chrome Extension is a client-side application. We do not collect, store, or transmit your personal information, notebook content, source content, chat content, or browsing history. The extension does not include any analytics or telemetry — nothing about your usage is sent anywhere. Separately, if you choose to subscribe to the newsletter, either on this website or from inside the extension, we collect the email address you enter. See Section 11.

2. Data Storage

All user data generated by the extension (such as folder organizations, the local trash, prompt and chain libraries, per-notebook notes, message-sent counters, and settings preferences) is stored locally on your device using the browser's chrome.storage.local and chrome.storage.sync capabilities. This data may be synced across your own devices if you have Chrome Sync enabled, but it is not accessible to the developer. If you are a Pro user and choose to enable the optional Google Drive Sync feature, a backup of this organization data is additionally stored in a private folder in your own Google Drive — see Section 5 for full details.

3. Website Interactions

The extension interacts with notebooklm.google.com to provide its features. All of these interactions occur strictly within your own browser.

• Optimize Prompt: NotebookLM does not expose a public model API the extension can use to rewrite a prompt, so the extension opens a background tab on gemini.google.com inside your existing browser session, sends the prompt there to be rewritten, and reads the result back. This requires the optional gemini.google.com host permission, which is requested the first time you use the feature. Your prompt never leaves your browser, and it is never sent to any server owned by the developer.
• Sources Export, Studio Export, and Source Deletion: These features call NotebookLM's own internal endpoints (the same ones the website uses) directly from your browser to read source content, read Studio artifact content, or delete a source. Your session cookies are used to authenticate, exactly as they would be when you click in the NotebookLM UI itself. No content is sent to the developer.
• Studio media downloads: When you export an audio, video, slide-deck, or infographic Studio artifact, the underlying media file lives on a googleusercontent.com CDN that blocks direct reads from the page. The extension's service worker fetches the file in your browser and hands the bytes back to the page so it can be saved. This is what the optional https://*/* host permission is used for, and it is only requested when you first export Studio media.
• Chains and Slash Commands: Chains submit prompts to NotebookLM on your behalf and watch the page locally to know when a step has finished. No network data is collected or transmitted externally.

4. Premium Licensing (Pro Features)

If you choose to activate a premium license key, the extension communicates with LemonSqueezy (a third-party payment and licensing platform) to validate your license. This involves sending your license key to api.lemonsqueezy.com for activation, periodic validation, and deactivation. This communication only occurs if you voluntarily enter a license key, and the api.lemonsqueezy.com host permission is optional — it is requested only at activation time. No personal payment information is handled by the extension itself; all purchases are processed directly by LemonSqueezy through their website.

If you cancel a Pro subscription: LemonSqueezy notifies our website, which sends you one email through Sender (sender.net) asking why you cancelled. It uses only the email address from your LemonSqueezy purchase, is sent once, and does not add you to the newsletter or any other mailing list. Replying is optional, and a reply goes straight to the developer. We send it on the basis of our legitimate interest in understanding why customers leave, so we can improve the extension. Sender keeps a record of that one delivery under its own retention policy; email us if you want it deleted.

5. Google Drive Sync (Optional, Pro Feature)

Google Drive Sync is an optional feature, available to Pro users, that is turned off by default. It is only ever activated if you explicitly enable it from the extension's settings popup.

• What it does: When enabled, the extension stores a single backup file named superpower_notebooklm.json in a private application-data folder inside your own Google Drive. This lets your organization data follow you across your devices and browsers.
• What is synced: Only data you created inside the extension — notebook folders, per-notebook source folders, saved prompts, prompt chains, the local trash list, and free-text per-notebook notes. Your notebook content, source content, and chat content are never uploaded.
• Permissions used: The optional identity permission and the https://www.googleapis.com/auth/drive.appdata OAuth scope. Both are requested on demand, at the moment you switch the feature on — never on install.
• Scope of access: The drive.appdata scope grants access only to the private application-data folder the extension creates. The extension cannot read, list, modify, or delete any of your other Google Drive files, photos, or documents, and it receives no account or profile information.
• Where the data goes: Directly between your browser and Google's servers, into your own Google Drive account. It never passes through, and is never stored on, any server owned by the developer.
• Turning it off: You can disable Drive Sync at any time from the settings popup, which revokes the extension's access token. Deleting the backup file from your Drive's app-data folder removes the synced copy.

Limited Use disclosure: Superpower for NotebookLM's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data obtained via the drive.appdata scope is used solely to provide and improve the user-facing Drive Sync feature. It is never transferred to the developer or any third party (except as necessary to provide the feature, or as required by law), never used for advertising, and never read by humans except with your explicit consent, for security purposes, or as required by law.

6. Bug Reporting & Feature Proposals

The extension provides "Report a Bug" and "Propose Features" buttons that open Google Forms.

• Report a Bug: May automatically pre-fill your Extension Version and User Agent (browser/OS details) into the form URL.
• Propose Features: May automatically pre-fill your Extension Version into the form URL.
• Voluntary Submission: This data is only transmitted to Google Forms if you manually click "Submit." Simply opening the form does not send any data to the developer.
• Purpose: This information is used solely for troubleshooting bugs and prioritizing feature development.

7. Uninstall Feedback

When the extension is uninstalled, your browser may open a feedback form. The only data included automatically in the URL is the extension version number. No personal information is transmitted. Submitting the form is entirely voluntary.

8. Third-Party Services

This extension enhances the user interface of Google NotebookLM. It is not affiliated with Google or Alphabet Inc. The extension functions by injecting custom interface elements, managing local storage for organization, and automating specific user actions on the NotebookLM website. The following third-party services are involved:

• Google NotebookLM (notebooklm.google.com): The target website the extension enhances. All page interactions occur locally in your browser.
• Google Gemini (gemini.google.com): Used only by the Optimize Prompt feature, in a background tab inside your own browser session, as described in Section 3. Optional host permission, requested on first use.
• Google user content (googleusercontent.com): Source of audio/video files exported by the Studio Export feature, as described in Section 3. Optional host permission, requested on first use.
• Google Drive & Google OAuth (googleapis.com, accounts.google.com): Used only by the optional Pro Drive Sync feature to store your extension organization data in a private application-data folder in your own Google Drive, as described in Section 5. Optional identity permission and drive.appdata scope, requested only when you enable the feature.
• LemonSqueezy (api.lemonsqueezy.com): License key validation for optional premium features, as described in Section 4. Only contacted when a license key is provided.
• Google Forms: Used only if you voluntarily submit a bug report, feature proposal, or uninstall feedback, as described in Sections 6 and 7.
• superpowerforai.com: Our own website. The extension contacts it only when you submit the optional newsletter signup, and the request carries only the email address you typed. See Section 11.
• Sender (sender.net): Email marketing provider for the newsletter described in Section 11. The extension never contacts it directly; a signup made inside the extension goes to our website, which passes it to Sender. Sender also delivers the single email sent when you cancel a Pro subscription, described in Section 4.
• Cloudflare (cloudflare.com): Hosts superpowerforai.com, so every request the extension sends to our website (see the entry above) passes through Cloudflare, which sees the IP address it comes from. Cloudflare also provides the website's cookie-free visitor statistics, described in Section 12.

9. Data Management & Liability

The extension interacts with the Google NotebookLM web interface to provide features such as notebook and source organization (folders, local trash), bulk actions, exports, prompt optimization, and reusable prompt/chain libraries. While we strive for reliability, the software is provided "as is." The developer is not responsible for any data loss, unintended modifications, or disruption of functionality caused by network errors, changes to the Google NotebookLM user interface, browser updates, or user error. The local trash is a soft-delete layer maintained on your device only — it does not protect notebooks against deletion from another device or from the official NotebookLM UI elsewhere.

10. Data Retention

Locally stored data (notebook folders, source folders, prompts, chains, the local trash, per-notebook notes, and settings) remains on your device until you delete it from within the extension or uninstall the extension. The extension collects no analytics or telemetry, so there are no usage records to retain. License validation records sent to LemonSqueezy are retained according to that provider's own retention policy. Disconnecting Google Drive Sync revokes the OAuth token; the synced backup file in your Drive's app-data folder remains under your control and can be deleted from your Google Drive at any time. Newsletter addresses are covered separately in Section 11.

11. Newsletter

This section covers the newsletter signup, which lives in four places: the form on superpowerforai.com, the mail button in the extension's settings popup, the form at the bottom of the welcome page the extension opens after install, and the confirmation the extension shows after you activate a Pro license. All four are optional and work the same way: nothing happens until you type your email address and submit it.

• What we collect: Only the email address you type in, and which product's list you submitted it from. Nothing is pre-filled, and neither the website nor the extension reads an address from your browser.
• Why: To send occasional updates about Superpower for NotebookLM: breakage alerts, new features, and subscriber deals, roughly once a month.
• Legal basis: Your consent, given when you submit the form. You can withdraw it at any time, and withdrawing it does not affect anything else.
• If someone else entered your address: A signup takes effect immediately, so it is possible for an address to be submitted by someone other than its owner. If you receive an email you never asked for, the one click unsubscribe link removes you straight away, and you can email us and we will delete the address.
• Who processes it: Sender (sender.net), an email marketing provider, stores the list and delivers the emails on our behalf. Your address is never sold, rented, or shared with anyone else. The submission, from any of the four forms, passes through our site on Cloudflare Pages before reaching Sender.
• Withdrawing consent: Every email includes a one click unsubscribe link. You can also email us and ask to be removed.
• Retention: We keep your address until you unsubscribe or ask us to delete it, whichever comes first.

12. Website Visitors

This section covers what happens when you simply visit superpowerforai.com, including this page. The website has no accounts, and apart from the optional newsletter form (Section 11) it never asks you for anything.

• Hosting (Cloudflare): The website is hosted on Cloudflare Pages. Like any web host, Cloudflare receives the technical details your browser sends with every request, such as your IP address, browser and operating system, the page you asked for and the page that linked to it. Cloudflare uses them to deliver the site and protect it from attacks. We use only the aggregate statistics Cloudflare builds from them, such as visits per day or per country, and do not keep our own logs of visitors.
• Cloudflare Web Analytics: To see which pages are read and how people find them, the website uses Cloudflare Web Analytics, which loads a small script from Cloudflare (static.cloudflareinsights.com). It uses no cookies or any other storage in your browser, and it does not try to identify you or follow you across visits or other websites. It reports the page you viewed, the page that linked to it, your browser, operating system, device type and country, and how fast the page loaded. We see only totals built from those reports.
• Google Fonts: The website's pages load their fonts from Google Fonts (fonts.googleapis.com and fonts.gstatic.com), so your browser requests those font files from Google, which receives the request, including your IP address. Nothing else about you or your visit is sent with it.
• Install links and affiliate tracking: Our install pages (addresses ending in /Install/, usually shared by affiliates) wait a few seconds before sending you on to the Chrome Web Store, and load the affiliate script of Lemon Squeezy (lmsqueezy.com) while they wait. Loading it means Lemon Squeezy receives your IP address, as with any request. If you did not arrive through an affiliate's link and have no cookie from an earlier one, the script does nothing further. If you did (the address contains an affiliate ID), it computes an identifier for your device from characteristics of your browser, such as its screen size, time zone, languages, installed plugins and how it draws graphics (a technique known as browser fingerprinting), and sends Lemon Squeezy that identifier together with the affiliate ID, the address of the install page and the page that linked to it. It then stores a cookie in your browser holding a click ID from Lemon Squeezy, kept for a period Lemon Squeezy sets. This lets a later purchase be credited to the affiliate who referred you. The link to the Chrome Web Store also carries campaign tags (utm_source, utm_campaign) naming the link or affiliate you came through. They describe the link, not you.
• Theme preference: If you switch between the light and dark theme, the website remembers your choice in your browser's local storage. It never leaves your device.
• Legal basis and retention: Hosting, security, visitor statistics and fonts rely on our legitimate interest in running a fast, secure website and knowing which pages are useful. Cloudflare, Google and Lemon Squeezy keep the data they receive under their own retention policies.

13. Contact

The data controller is SulfurByte, the trading name of David Košnar, Rumunská 789/11, 779 00 Olomouc, Czech Republic, IČO 46784519. If you have questions about this policy, contact us at sulfurbyte+support@gmail.com.