Privacy policy

• Active tab content — only when you open the extension popup. Meta tags, headings, links, images, and visible text are read for the audit. Processed locally and not sent to the developer.
• Google Search Console data (optional) — if you connect an account, the extension fetches stats and indexing status for the current URL (clicks, impressions, position, queries, indexing status) in read-only (webmasters.readonly) mode. Calls go straight from your browser to the Google API under your OAuth token.
• Google Gemini (optional) — if you’ve entered your Gemini API key and clicked "Generate recommendations", the page content + Search Console query list are sent to Google Gemini API under your key for recommendation generation.
• Audit history (optional) — the extension may locally cache the last 10–20 audits for quick reopen. Cache is cleared by "Clear cache" or by removing the extension.

All data is stored locally in your browser (chrome.storage.local) and doesn’t leave the device, except as described above:

• your Gemini API key;
• Search Console results and AI recommendation cache (for quick open);
• selected Gemini model;
• UI preferences (language, theme, default date ranges).

Google OAuth token is managed by the browser’s secure chrome.identity mechanism and not accessible to the developer. Data is deleted on "Disconnect account" / "Change key" or on extension removal.

We do not share your data with third parties. The only external endpoints are Google services (Search Console API and Gemini API), called by the extension by your action and under your credentials. We don’t use ad networks or third-party analytics.

Use of information obtained via Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements. Search Console data is used exclusively to render the audit and recommendations in the extension UI. We do not share it with third parties, do not use it for ads, and do not use it for model training.

• activeTab + scripting — read the current page on icon click;
• identity — sign in to your Google account for Search Console;
• storage — local storage for key, cache, and settings;
• clipboardWrite — copy the report to clipboard;
• access to googleapis.com / searchconsole.googleapis.com / generativelanguage.googleapis.com — Google API calls.

All permissions are requested strictly for the functionality described above. The extension has no access to: browser history, passwords, open tabs other than the active one, files on disk.

• API keys are stored in chrome.storage.local and not synced between devices via the Google account.
• OAuth tokens are managed by the native chrome.identity mechanism with automatic refresh and storage in the browser’s secure area.
• The extension does not use eval(), does not load remote code, and has no content scripts outside the user-requested active tab.
• All network calls go over HTTPS, domains are restricted to a whitelist (Google API endpoints).

The extension is intended for professional use and is not directed at children under 16.

We may update this policy. The current version is always available at this URL; the effective date is shown at the top. Material changes (new types of collected data, new external services) will be reflected in the extension release notes and an in-app notification.

The developer is REPRESIDIUM. For privacy questions and data deletion, reach out via the main site or directly on Telegram: @zvon_off.