Privacy Policy — Cut the Crap

TL;DR: Cut the Crap has no server of its own — nothing you do in the
extension is sent to us. On the sites you switch on, page text is sent only
to the AI provider you configured, using the API key you provided (bring
your own key). We don't run analytics, tracking, or ads, and we never
request access to "all your data on all websites."

1. What this extension does

Cut the Crap rewrites the prose on a webpage — either compressing bloated,
jargon-heavy text down to the plain point ("decrapify"), or inflating a
plain statement into corporate waffle ("crapify"). That's its one job. It
runs only on sites you explicitly turn on; every site starts on "Normal"
(off).

1. What the extension handles

Page text. On a site you've enabled, the extension reads the visible prose
on the page and sends it to the AI provider you configured, so it can be
rewritten. That text is kept in memory only — it is never written to disk
and never sent to us. Page URLs are never sent or stored either; the
extension identifies a page load with a random, throwaway session id, not
the URL.

Your API key. Your provider API key is stored locally in your browser
(storage.local) and is sent only to that provider's own API — never to us.

Settings and per-site state. Your chosen provider/model and the list of
hostnames you've enabled are stored locally in your browser, so your
preferences persist between sessions.

Usage stats. The popup shows lifetime totals — words cut, words piled on,
pages processed — stored locally as plain numbers. These never leave your
device.

1. What we don't do
2. We don't operate a server, so we never receive your page text, URLs, or
   API key.
3. No analytics, tracking, or advertising of any kind.
4. We don't sell or share data — there's no data of yours on our end to sell
   or share.
5. No blanket "read and change all your data on all websites" permission.
   Access to a site is requested individually, only when you turn that site
   on.
6. Third-party AI providers

When you enable a site, its page text and your API key are sent directly
from your browser to the AI provider you selected in Settings — OpenAI,
Anthropic, Google, or MiniMax. That transmission is between your browser
and the provider; we are not a party to it. Each provider's handling of
that data is governed by their own privacy policy:

• OpenAI Privacy Policy — https://openai.com/policies/privacy-policy/
• Anthropic Privacy Policy — https://www.anthropic.com/legal/privacy
• Google Gemini API Additional Terms of Service —
  https://ai.google.dev/gemini-api/terms
• MiniMax API Privacy Policy —
  https://platform.minimax.io/protocol/privacy-policy
• Permissions, in plain language
• Storage — to save your settings, API key, per-site on/off list, and usage
  stats locally.
• Active Tab — to read the current tab's hostname when you open the popup,
  so the extension knows which site's setting to show/change.
• Scripting — to inject the rewriter into a tab, but only after you've
  enabled that site.
• Per-site host access (optional) — requested one origin at a time, only on
  the click that turns a site on. The extension is never granted access to
  "all sites" as a block.
• Data storage & retention

Everything the extension stores — settings, API key, per-site state,
stats — lives only in your browser's local storage on your device; none of
it syncs to any account of ours or anyone else's. The in-memory cache of
rewritten text is cleared automatically when the browser or the extension's
background process restarts. Removing the extension, or clearing its
storage from your browser, deletes all of it.

1. Security

Your API key is stored using your browser's built-in local storage. Keep
your device and browser profile secure, since anyone with access to them
could access data stored there — the same as for any other browser
extension or website login.

1. Children's privacy

Cut the Crap is not directed at children under 13 and we do not knowingly
collect data from them — in fact, we don't collect data from anyone, per
the sections above.

1. Contact

Questions about this policy? Email privacy@superfi.re.