# IncognitAI — Privacy Policy
**Last updated: 5 November 2026**
IncognitAI is a Chrome extension that lets you select a region of a page and ask an AI model of your
choice to explain or solve what is shown in it.
This policy covers the extension itself. It is deliberately short, because the extension has no
server, no account system and no developer-side data collection.
## Who we are
Joshua Madsen publishes the IncognitAI extension. Contact: joshua.a.madsen@gmail.com.
## What the extension handles
Only what is needed to answer your question:
- **The cropped screenshot** — the region you drag-select, encoded as a JPEG.
- **Your question and the conversation** — the text you type, plus the replies, held in the page
while it is open.
- **Provider credentials** — the API keys you paste in, for the providers you choose to enable.
- **Settings** — the provider, model and endpoint you picked, plus your theme, ghost-mode opacity and
results-window position.
## Where it goes
Straight from your browser to the provider **you** selected, using **your** key. Nowhere else.
- Gemini — `generativelanguage.googleapis.com`
- ChatGPT — `api.openai.com`
- Claude — `api.anthropic.com`
- Grok — `api.x.ai`
- Perplexity — `api.perplexity.ai`
- Meta AI — `api.llama.com`
- OpenLLM or any OpenAI-compatible endpoint — the address you enter
- Ollama — the address you enter, normally `localhost`
If you enable a local provider, the image and question never leave your computer. Requests to remote
providers are made over HTTPS from the extension's background service worker. Requests to a local
server you configured are made over plain HTTP to that loopback address only.
Each provider processes your data under its own privacy policy; review it before enabling that
provider. A key is only ever sent to the provider it belongs to.
## What we never do
- We do not collect, receive or store any of your data. There is no backend.
- No analytics, telemetry, crash reporting, advertising or tracking of any kind.
- No accounts, sign-ups or identifiers.
- We do not sell, rent or share your data, and we do not use it for advertising, profiling or to
determine creditworthiness or eligibility.
- No human reads your screenshots or questions.
- The extension runs no remote code. Every line of JavaScript it executes ships inside the package.
## Storage and retention
Keys and settings are stored with `chrome.storage.local`, which lives in your Chrome profile on this
device. It is **not** synced to your Google account, and we have no way to read it.
Chrome does not encrypt extension storage separately — the keys sit in Chrome's profile database,
protected by your operating-system account and Chrome profile in the usual way. Anyone who can read
that profile can read those keys, so use keys with limited scope and rotate them if a device is lost.
Screenshots, questions and answers are held in the page's memory only and are never written to disk.
You control retention:
- **Clear all saved keys** in the extension's settings removes every provider key immediately.
- Removing the extension deletes its stored settings and keys along with it.
- Closing the tab, or the results window, discards the screenshot and the whole conversation.
## Your choices
- Use only local providers (Ollama, OpenLLM) and nothing is transmitted off your machine at all.
- Enable only the providers you trust, and only paste keys you are willing to store on this device.
- Clear your keys at any time, or delete the extension.
## Children
The extension is not directed at children under 13 and does not knowingly handle their data. Content
you choose to send to a third-party AI provider is subject to that provider's policies.
## Changes
If this policy changes, the "last updated" date above changes with it, and the new version applies
from the date it is published at https://sites.google.com/view/incognitaiprivacypolicy.
## Contact
Questions about this policy: joshua.a.madsen@gmail.com.