$ cat privacy_policy.md
// privacy_policy
effective: June 23, 2026 · product: brainX · by web3cook
[brainX] TL;DR
brainX does not collect any information from you. All data stays on your local device. Nothing is ever sent to our servers.
$ cat overview.txt
// overview
brainX is a Chrome extension that generates AI-powered reply suggestions for X and LinkedIn.
We are committed to user privacy. This policy comprehensively discloses how brainX collects, handles, stores, and shares user data. Omission of any section is not allowed under developer policies, and we provide complete disclosure below.
$ cat data_collection.txt
// data_we_collect
To perform its core functions, brainX collects and processes only the minimum necessary information:
→ API Keys: User-provided API keys for AI platforms (OpenAI, Anthropic/Claude, DeepSeek, and xAI/Grok).
→ Active Tab Content: Text content, author usernames, and URLs of posts/tweets from the active x.com or linkedin.com tab.
→ Extension Settings: User preferences including selected AI models, active personas/voices, custom prompt configurations, and local draft status of generated replies.
We do NOT collect, harvest, or request any personal identification (names, emails), browsing history outside the active tab, IP addresses, or browser fingerprints.
$ cat data_handling.txt
// data_handling_and_use
All collected data is processed strictly in real time in direct support of the Extension's single purpose:
→ Scraped posts and active URL contexts are read temporarily in memory to build the generation prompt.
→ The constructed prompts and user-provided API keys are processed and transmitted to generate context-aware replies.
→ Injected scripts interact with the active page DOM to pre-fill draft reply boxes or perform liking/posting actions entirely on behalf of the user when requested.
$ cat data_storage.txt
// data_storage_and_deletion
We prioritize local-first sandboxed storage to ensure absolute control over your keys and data:
→ Local Sandbox: Your API keys, custom voices, settings, and generated reply drafts are stored exclusively on your device using the `chrome.storage.local` API.
→ Zero Server Syncing: We do not run, maintain, or operate any developer database or external storage server. No data is synced to the cloud by the extension.
→ Deletion: You can permanently delete all stored data by removing/updating settings in the Extension UI, clearing extension data in your browser settings, or uninstalling the extension.
$ cat data_sharing.txt
// third_party_sharing
We do not sell, rent, trade, lease, or monetize your data. Your data is shared only with the specific third-party AI providers you select and configure, solely to generate reply content:
→ Configured AI Services: OpenAI, LLC (OpenAI models), Anthropic, PBC (Claude models), DeepSeek (DeepSeek models), or xAI, Corp. (Grok models).
→ Direct Secure Channels: All API requests containing scraped post context and your API key are sent securely via HTTPS directly from your browser to the official endpoints of these providers. No developer-controlled proxy servers are involved.
$ cat changes.txt
// changes_to_this_policy
If this policy ever changes, we will update the effective date below and post the revised version on this page.
Continued use of brainX after any changes constitutes acceptance of the updated policy.
$ cat contact.txt