Privacy Policy
๐ Summary: CurdCraft AI collects no personal data. All cheese data, AI inference, and user storage remain 100% on your device. The only external connection is to extensionpay.com to verify your subscription status.
1. Who We Are
CurdCraft AI ("the Extension", "we", "our") is a Chrome extension that helps users discover, pair, and track artisan cheeses. It is developed independently and published on the Chrome Web Store.
2. Data We Do NOT Collect
CurdCraft AI does not collect, store on external servers, transmit, or share any of the following:
- Personal identifiers (name, email address, phone number)
- IP addresses or device identifiers
- Browsing history, URLs visited, or page content
- Cheese searches, encyclopedia queries, or filter preferences
- Tasting journal entries, notes, or ratings
- Cheese boards you create
- AI queries entered into the Cheese Sommelier
- Usage analytics or telemetry of any kind
3. On-Device AI Processing
The AI Cheese Sommelier feature uses Chrome's built-in Gemini Nano language model via the Chrome Prompt API (window.ai.languageModel). All inference โ every question you ask and every answer generated โ runs entirely on your local device. No queries, prompts, or responses are transmitted to any external server by this extension under any circumstances.
4. Local Storage
The Extension uses chrome.storage.local to store the following data exclusively on your device:
- Your tasting journal entries and ratings
- Your saved cheese boards
- Your preferences (page highlighter on/off, etc.)
- Your daily trivia streak counter and last answered date
- Your premium subscription status (review reward expiry)
- Extension installation timestamp and version
This data never leaves your device through this extension. You can clear it at any time via Chrome's Settings โ Extensions โ CurdCraft AI โ "Clear data".
5. Payment Processing via ExtensionPay
Premium subscriptions are processed exclusively by ExtensionPay, a third-party payment processor. When you choose to upgrade:
- You are directed to ExtensionPay's secure payment interface
- CurdCraft AI never receives, processes, or stores your payment card details
- The Extension communicates only with
https://extensionpay.comto verify whether your subscription is active - This verification uses an anonymous extension-user token โ not personally identifiable information
Please review ExtensionPay's Privacy Policy for details on how they handle payment data.
6. Page Highlighter Feature
The page highlighter scans the text content of webpages you visit to identify cheese-related terms and highlight them inline. This scanning:
- Happens entirely within your browser using a local list of cheese names
- Does not transmit any page content to any server
- Does not record which pages you visit
- Can be disabled at any time from the extension popup footer toggle
7. Permissions and Justifications
- storage โ Used exclusively to save your tasting journal, cheese boards, preferences, and trivia streak locally on your device. No external transmission.
- alarms โ Used to refresh the Cheese of the Day and daily trivia at midnight, without requiring the popup to remain open. No data is involved.
- activeTab โ Used by the page highlighter to scan the currently active tab's visible text for cheese names when the feature is enabled. No browsing data is recorded or transmitted.
- host_permissions: https://extensionpay.com/* โ Required solely to communicate with ExtensionPay's API to verify your premium subscription status. No other external domains are contacted.
8. Children's Privacy
CurdCraft AI is not directed at children under 13 years of age. We do not knowingly collect any information from children. The extension contains no age-inappropriate content.
9. Third-Party Services
The only third-party service contacted by this extension is ExtensionPay, and only for payment verification. No advertising networks, analytics services, or tracking pixels are used.
10. Data Security
Since CurdCraft AI stores all user data locally using Chrome's chrome.storage.local API, it is subject to Chrome's own storage security model. We do not transmit data over networks (except payment verification via HTTPS to ExtensionPay), so network-level data security risks are minimal.
11. Your Rights and Data Deletion
To delete all data stored by CurdCraft AI:
- Open Chrome โ Settings โ Extensions โ CurdCraft AI โ Details โ "Clear data"
- Or uninstall the extension โ this removes all locally stored data automatically
12. Changes to This Policy
We may update this Privacy Policy to reflect changes in the extension's functionality. The "Last Updated" date at the top of this page will reflect any changes. Continued use of the Extension after any changes constitutes acceptance of the updated policy.
13. Contact
If you have questions about this Privacy Policy or data practices, please open an issue at: github.com/darkmessiah0071/curdcraft-ai/issues