Privacy Policy
Last updated: November 5, 2026
This policy covers the Polaris browser extension and website. Conversation text used for navigation, search, copying, and export is processed on your device and is not uploaded to Polaris servers. License and payment records, described below, do not include that chat content. The website analytics disclosures supplement the extension’s data-handling policy. This policy is a disclosure of data handling for users in many countries. It is not a warranty that using Polaris complies with any AI provider’s terms, and it is not a warranty that your own use of a third-party chat complies with every country’s AI-platform rules or data laws. Mandatory local privacy rights still apply where the law gives them. Responsibility for provider terms is in the Terms of Use. Who handles license records, and which regional rights may apply, is in section 12.
1. Information We Process
Website Content
Polaris: AI Chat Navigator accesses the text and document structure of AI-generated responses displayed on supported websites.
How Polaris reads a page. On a supported AI chat site, Polaris injects a content script into the tab you already opened. It inspects the page DOM—the same rendered messages you can see—to find headings, lists, and message boundaries, then builds local navigation markers (TOC), an Outline tree, and optional full-text search over what has already been loaded. This inspection happens in your browser. Polaris does not ask the AI provider for a separate OAuth or developer-API grant to read chat text for navigation.
Default mode only uses content that is already present in the page. Opt-in complete indexing (currently ChatGPT and Gemini) is different: it may issue additional same-origin requests with your existing website session to load more of the current conversation active branch. That method is disclosed here and in the Terms of Use. It is not an official ChatGPT or Gemini developer API. A provider may treat that programmatic history retrieval as restricted automated extraction even when the messages are your own prompts or output you are allowed to view in the product. Being able to read the text in the UI does not mean the provider allows this retrieval method. You decide whether to turn it on.
When complete indexing is enabled for ChatGPT or Gemini, it also requests the current conversation's active branch of user-visible messages through the selected site's same-origin session to build a complete outline and full-text search index. This index stays in memory across DOM removal and is cleared on conversation changes, page refresh or closure, or disabling complete indexing. While complete mode is enabled, the ChatGPT page bridge may also keep filtered snapshots of recently opened conversations for up to 60 seconds to reuse the site's own loading work, limited to three snapshots per private or shared conversation type. These temporary snapshots contain only the active branch's user-visible messages, are invalidated when an account or workspace change is detected, and are cleared when complete mode is disabled or the page closes. Complete indexing also stores a gzip-compressed snapshot of the active branch's user-visible messages and parsed records in the extension's own local IndexedDB, isolated by a confirmed account, workspace, and conversation. These snapshots are not synchronized or uploaded. Unknown identities and private windows skip persistent caching. Hidden reasoning, tool messages, alternate branches, and downloaded attachments are not included in the cache. This access is necessary to identify headings and list structures, generate navigation markers, scroll to selected sections, and show AI response content in the full-screen text-selection feature, and support user-initiated conversation copying and file export.
Website content is processed locally within the user's browser. Conversation text is not transmitted to the developer, to a Polaris server, or to any other server for Polaris to process. The license, trial, purchase, and recovery requests described below do not include AI conversations, prompts, or page content. Complete ChatGPT and Gemini indexing uses the existing page session to authenticate same-origin requests to the selected site. Those requests go to that AI site, not to Polaris. Short-lived authentication data remains in the page context and is never placed in extension messages, diagnostic logs, persistent storage, or synchronization. Polaris does not ask for passwords.
Third-party page injection
Host permissions let Polaris run only on disclosed AI chat origins. The extension inserts its own UI (markers, Outline, settings entry points) into those pages. Some providers' terms discourage or prohibit unauthorized plugins and page overlays. Polaris discloses this injection so you can decide whether to enable the extension on each site. Conversation text used for navigation is still processed locally as described above.
Extension Settings
Polaris: AI Chat Navigator stores user preferences such as top and right spacing, the maximum number of visible markers, tooltip width, enabled heading levels, and unordered-list marker preferences. The complete-conversation reading preference applies to ChatGPT and Gemini across subsequent conversations. It is synchronized with the other preferences; when browser synchronization is enabled, it can enable complete reading in other signed-in browsers where the feature is available. Conversation snapshots themselves are never synchronized.
These settings are stored using the Chrome Storage Sync API. If browser synchronization is enabled, the settings may be synchronized across the user's signed-in Chrome browsers by Google under Google's applicable privacy terms. The developer cannot access these synchronized settings.
Trials, Purchases and Licenses
Polaris can contact its license service to initialize a seven-day trial, obtain available plans and validate an existing license. It generates a random installation identifier and independent credential; these, device activation credentials and pending purchase claims are stored in Chrome Storage Local and are not synchronized. Free platform choices stay on the device. No Polaris account or hardware fingerprint is required.
When you choose to purchase, Stripe-hosted Checkout processes payment and collects your checkout email. Card information is not stored by the extension or license service. The Cloudflare Worker and D1 service store the order, license and activation records needed for fulfillment and validation. License and activation verifiers are hashed; email and license delivery material are encrypted separately for delivery and recovery. License delivery uses the disclosed license service. Neither payment nor licensing includes AI conversations, prompts, browsing history, full browsing URLs or hardware fingerprints.
A recovery request uses the checkout email and returns the same confirmation whether or not a matching purchase exists. The service uses short-lived hashed-IP counters and delivery throttling to limit abuse. The test integration is separate from a production billing rollout, and local UI previews do not charge a payment method.
Diagnostic Logs
If the user explicitly selects a diagnostic action in About & Settings, Polaris: AI Chat Navigator records a bounded session-only log for the current tab. The log contains the extension version, coarse platform and browser summaries, viewport measurements, pointer-drag lifecycle outcomes, route and render counts, and error type names. It is designed to exclude AI response text, marker titles, full URLs, account information, prompts, cookies, tokens, error messages, and stack traces. Complete-reading events may also include a cache-hit flag, stage durations, and a count of additional history-page requests.
The log is stored only in the current tab's session storage until the tab is closed or the session is cleared. "Download only" saves a redacted JSON file locally. "Send diagnostic log" also opens a pre-addressed email draft to [email protected]; the browser does not automatically attach the local file, so the user chooses whether to attach and send it. Polaris: AI Chat Navigator does not upload diagnostic logs or add a background upload service.
Clipboard
When the user activates a copy action, Polaris: AI Chat Navigator writes the selected text, a chapter, or conversation text to the system clipboard. Full-conversation copying includes user messages and AI replies in the active branch and is independent of chapter filters or folding. Complete-index copying is available only after reading finishes; page-based copying includes only content already read from the page. The extension does not read existing clipboard content or upload copied text. Clipboard contents are managed by the user's operating system and any clipboard tools the user has enabled.
Conversation File Export
After copying a conversation, the user can explicitly save the same message scope as Markdown or HTML. Files are generated locally in the browser and downloaded to a location managed by the user; conversation text is not sent to a processing server. Exported images are represented by text labels, and raw message HTML is sanitized or escaped. Normal links remain clickable; following them contacts their destination. Downloaded files remain until the user deletes them, independently of the extension's cache. Any sharing or cloud backup of these files is controlled by the user and the applications or services they choose.
2. How We Use Information
Information accessed by Polaris: AI Chat Navigator is used solely to provide its user-facing features, including section detection, navigation markers, click-to-scroll navigation, display customization, full-conversation indexing and search, full-screen text selection, chapter or conversation copying, and local Markdown or HTML file export.
The extension does not use information for:
- Advertising or personalized advertising;
- Analytics or behavioral tracking within the extension;
- User profiling;
- Creditworthiness or lending decisions;
- Selling or licensing user data; or
- Unrelated product research.
3. Data Sharing and Disclosure
Polaris: AI Chat Navigator does not sell, rent or trade personal information. AI website content is not shared with the developer, advertisers, data brokers or other third parties. Payment and license information is processed only by the services described above to provide the requested purchase, authorization, delivery and recovery features.
External processing includes license-service requests, user-initiated Stripe Checkout and license email delivery, optional synchronization of extension settings through Chrome Storage Sync, and the user's explicit choice to open a diagnostic file or email draft. The settings synchronization service is provided and controlled by Google. The extension does not include third-party analytics, telemetry, or advertising services, and it does not automatically transmit diagnostic logs.
Polaris also links to a separate support webpage. That webpage loads Google Analytics only after the visitor explicitly allows analytics. It measures only a support-page arrival from Polaris and a video-loading play-button click; it does not receive AI conversation content, extension settings, or PayPal payment details. The support page provides its own privacy information and a way to change the analytics choice.
4. Data Retention
Default mode does not persist AI responses or user prompts. Opt-in complete ChatGPT and Gemini indexing caches user-visible conversation text and parsed records locally, with a total compressed limit of 100 MiB. Least-recently-used entries are removed when space is needed. Snapshots remain after closing a tab or disabling complete mode until the user selects Clear conversation cache in Preferences, entries are evicted, or the extension is removed. Clearing also invalidates pending old cache writes. The cache does not retain Maker navigation history or authentication credentials.
Extension settings remain in Chrome storage until they are reset or removed by the user through the browser or extension settings. Synced settings may also be managed through the user's Google Chrome synchronization settings.
Diagnostic events remain in session storage for the current tab, are bounded in count and size, and are cleared when the tab session ends or when the browser clears session storage. A downloaded copy remains under the user's control, and any email retention is governed by the user's mail provider and choices.
Local installation and activation credentials remain until the extension is removed or its local storage is cleared. Device deactivation revokes its activation credential but retains the installation identity and trial deadline. Test license delivery ciphertext and order records remain for the lifetime of that test license; delivery retry metadata does not contain plaintext credentials. Short-lived rate-limit counters are periodically deleted. Contact the developer about deleting server-side test purchase and license records. You may email [email protected] to ask for deletion of server-side purchase and license records we still hold. Where we can, and where tax, accounting, fraud-prevention, or another legal duty does not require us to keep them, we will delete or de-identify them. We cannot delete a conversation cache from that request, because the cache stays on your device. Clear it as described in section 8.
5. Browser Permissions
- Storage permission: used to save and synchronize extension preferences. Complete-conversation snapshots use extension-owned local IndexedDB and are not synchronized.
- Host permissions: used to run the extension on supported AI chat websites, locally inspect AI response content for navigation, and contact the disclosed license-service host for trial and license operations.
The extension requests only the permissions needed to provide its disclosed functionality.
6. Data Security
Because website content is processed locally and is not transmitted to the developer or to a Polaris server, Polaris: AI Chat Navigator does not maintain external databases containing user content. License and payment systems described in this policy store order, license, and activation records only. They do not receive conversation text. Any synchronization of extension settings is handled through Chrome's Storage Sync service and its associated security mechanisms. Local gzip compression is not application-layer encryption and does not replace device and browser access protection.
7. Chrome Web Store Limited Use
Polaris: AI Chat Navigator is designed to process page content locally for its disclosed navigation, reading, and export purpose. This section describes that handling so it can be read against the Chrome Web Store User Data Policy, including the Limited Use requirements. Information accessed by the extension is used only to provide or improve that disclosed single purpose. It is not used or transferred for personalized advertising, profiling, data brokerage, creditworthiness decisions, or any unrelated purpose. This is a Limited Use disclosure. It is not a certification, and it is not a warranty that using Polaris complies with any AI provider's terms.
No human is permitted to read user website content through Polaris: AI Chat Navigator because that content is never transmitted to or stored by the developer.
8. User Choices
You can stop the extension from reading pages by disabling or uninstalling Polaris: AI Chat Navigator. To stop opt-in complete indexing, turn off the complete-conversation reading preference. That preference applies to ChatGPT and Gemini. Turning it off stops new complete reading. The in-memory index is cleared when complete mode is disabled, the conversation changes, or the page is refreshed or closed. Local IndexedDB snapshots remain until you select Clear conversation cache in Preferences, entries are evicted, or the extension is removed. Closing a tab does not by itself delete that persistent cache.
You may also reset other extension preferences from the extension settings, clear the current tab's diagnostic session by closing the tab or clearing session storage, and manage synchronized settings through Chrome synchronization. Diagnostic export, copying, and file export happen only when you start them. These choices control Polaris on your device. They are not a statement that a provider treats earlier use as allowed. Your responsibility for provider rules is in the Terms of Use.
9. Independent Tool and Third-Party AI Services
Polaris: AI Chat Navigator is an independently developed browser extension. It is not affiliated with, endorsed by, sponsored by, or an official plugin of OpenAI, Anthropic, Google, or the operators of Grok, Doubao, Kimi, Qwen, DeepSeek, Manus, Yuanbao, and Diandian. Third-party product names and trademarks belong to their respective owners and are used to identify the services with which Polaris works. This policy does not mean that any of those companies has reviewed, approved, or partnered with Polaris.
Polaris processes content from conversations the user can access through the supported website, and it inserts its own interface into the page the user already opened. Complete ChatGPT and Gemini indexing can request additional history for the current conversation using that website's existing signed-in session. Page injection and these website-session requests are not an official developer API, partner integration, or approved plugin. Installing Polaris, granting browser permissions, or enabling complete reading does not itself establish permission from the AI service provider for any particular access method.
The current navigation, reading, search, copying, and export features do not send conversations to OpenAI's public Responses API for model inference and do not offer Sign in with ChatGPT or ChatGPT plan usage. OpenAI's ChatGPT plan usage documentation describes a separate OAuth permission for eligible inference requests; that permission does not grant access to ChatGPT conversations. An existing website login session is not that OAuth authorization, and official API documentation does not authorize Polaris's website-history access.
Provider terms may restrict automated or programmatic extraction of data or output, unauthorized plugins, page overlays, and bypassing access controls, rate limits, or other service restrictions, even where content is visible to the user. Some published terms, including terms for certain Chinese services, discourage or prohibit unauthorized plugins, overlays, or automated collection. Local processing, content ownership, and user consent do not by themselves resolve these restrictions. You decide whether to enable Polaris on a given site and whether that use fits the provider's terms. This policy is a disclosure of data handling. It does not create a warranty of fitness for compliance with any third-party terms, and it is not a representation that a provider has approved an access method or that using Polaris complies with a provider's terms. Risk allocation is in the Terms of Use.
The AI service provider continues to control its accounts, content delivery, access restrictions, and handling of data sent to that service. Its terms and privacy policy apply separately from this policy and may vary by region, account type, or feature. Published terms and privacy information for services Polaris can run on include:
- ChatGPT (OpenAI): Terms of Use and Privacy Policy
- Claude (Anthropic): Consumer Terms and Privacy Policy
- Gemini (Google): Terms of Service and Privacy Policy
- Grok (x.ai): Terms of Service and Privacy Policy
- Doubao: User Agreement and Privacy Policy
- Kimi: Terms of Service and Privacy Policy
- Qwen (千问): User Agreement and Privacy Policy
- DeepSeek: Terms of Use and Privacy Policy
- Manus: Terms of Use and Privacy Policy
- Yuanbao (Tencent): Privacy Policy. The user service agreement is published in the Yuanbao product at yuanbao.tencent.com.
- Diandian: User Agreement and Privacy Policy
If a provider asks us to stop offering Polaris on its site, we may disable that platform. This policy describes Polaris's data handling; it does not amend a provider's terms, grant rights to its services, or authorize bypassing its access controls or restrictions.
Local reading, copying, and exporting do not transfer ownership of conversation content to the developer or grant users additional rights in that content. Users should access, export, and share only content they are authorized to use, with regard to applicable law, third-party rights, confidentiality obligations, and the relevant service's terms.
Polaris features depend on third-party websites and the user's permitted access to them. Changes to website interfaces, endpoints, policies, account permissions, or service availability may temporarily or permanently affect reading, navigation, and export. Polaris does not control those services and cannot guarantee continued compatibility or continued access to them. Nothing in this policy excludes or limits rights or remedies that cannot be excluded or limited under applicable law.
10. Changes to This Privacy Policy
This Privacy Policy may be updated if the extension's functionality or data-handling practices change. Any material change to the types of information processed or how information is used will be disclosed through an updated Privacy Policy and, where required, through the extension interface or Chrome Web Store listing before the new practices take effect.
11. Website Analytics, Hosting and External Links
On the Polaris website, Google Analytics 4 and Aliyun SLS analytics are initialized and send events only after you choose “Allow analytics”. SDK files may be loaded before that choice, but no analytics event is initialized or sent before consent. Automatic Google Analytics page views are disabled. You can decline analytics and continue using the site, or change your choice through “Analytics settings” in the homepage footer.
Google Analytics measures support-entry arrivals from the extension and clicks on the video recovery play button. SLS records consented landing-page arrivals and local ZIP download actions. Events can include UTM attribution, a fixed polaris_extension source from the same-origin extension-entry path, or direct_share/direct when source parameters are absent, plus normalized device, browser, operating-system, viewport and language categories. Direct attribution also covers bookmarks, typed URLs and links with removed parameters. A download event records the action, not successful saving of the file.
These event fields do not include raw User-Agent values, device models, IP addresses, full URLs, AI conversations, extension settings, account information or payment details. Network requests still expose connection information, such as the IP address, to the hosting, security or analytics provider receiving the request. Hosting and security providers, including Alibaba Cloud and Cloudflare where used in the delivery path, may process request metadata and necessary security cookies to deliver and protect the website. These network-level operations are separate from optional analytics events.
The website stores your language, theme and analytics choice in your browser. The legal pages do not initialize analytics or request conversation content. Website pricing information does not create an extension trial or start payment collection.
Provider information: Google Privacy Policy, Aliyun SLS SDK privacy description, Alibaba Cloud privacy information, Cloudflare Privacy Policy, and PayPal Privacy Statement. SLS browser delivery uses temporary STS credentials.
12. Roles, Transfers and Regional Rights
For navigation, indexing, search, copying, and export, conversation content is processed on your device. The developer is not the recipient of that conversation content. For trials, purchases, licenses, and recovery, the independent developer who operates polaris-ai.work decides why the checkout email, order, license, and activation records described above are used. In privacy-law terms, that developer is the controller, or the equivalent person responsible, for those license records. Stripe and Cloudflare (including the Worker and D1 service) handle those records to provide checkout, storage, and license delivery. For that work they act as processors or service providers under their own terms. This description is not a claim that counsel has matched it to a statute section by section, and it is not a certification.
License-related personal data may be processed in the United States and in other countries where Stripe, Cloudflare, and the site’s hosting or security providers operate. The transfer is made as needed to provide checkout, license delivery, recovery, and operation of the site. Those providers’ own terms and contractual protections apply. This policy does not say that a particular transfer contract, such as standard contractual clauses, has been signed.
Depending on where you live, you may have a right to access, correct, or delete personal information, to receive a portable copy, to restrict or object to some processing, to withdraw consent where processing is based on consent, and to complain to a supervisory authority, including in the EEA or the UK. If you live in California, you may have a right to know, delete, and correct personal information. Polaris does not sell personal information, and it does not share personal information for cross-context behavioral advertising. Which rights you have depends on where you live and on the law that applies. Email [email protected]. Do not include conversation content or a payment card number. This page does not name an EU representative or a data protection officer, because none is appointed here. We will answer as the applicable law requires.
If you use the website or extension from mainland China, license personal information is handled as this policy describes. Conversation content remains on your device. This policy does not replace the personal-information notices of the AI sites you use.
13. Contact
For privacy questions or requests, email [email protected] or contact the developer through Polaris: AI Chat Navigator GitHub Issues.