This policy describes how the Study Buddy Chrome extension and its backend at api.studybuddyai.one (the "Services") handle information. Study Buddy is operated by Dmitrii Smelov. If you do not agree to this privacy policy, please do not use the Services.
Our Principles
- Privacy policies should be human readable and easy to find.
- Data practices should meet the reasonable expectations of users.
- Collect as little as possible: nothing is captured or sent until you explicitly select an area and start a task or send a question. The extension does not read or scan pages in the background.
Information We Collect
Information You Provide Directly to Us
Study Buddy lets you select an area of a web page and ask an AI model (currently Anthropic Claude Haiku via OpenRouter) about it. When you start a task or send a message, the extension sends to our server: the selected image(s), your typed text, a limited selection of earlier messages from the same conversation, the task type and the interface language. No account, name or email is ever requested.
Please review what you select before sending. Screenshots and typed text may contain personal information that is visible on the page.
Information that Is Automatically Collected
Device/Usage Information. To enforce free usage limits, the server keeps limited technical records:
- Anonymous installation ID and a hashed secret, which let the extension recover access. These are random values and are not linked to your identity.
- Access sessions (stored as a hashed token with timestamps).
- Usage records: monthly spending per anonymous installation (the limit is $5 per month), charge status and provider generation IDs used to reconcile costs.
- Duplicate-request records: a request ID, a fingerprint, the status and timestamps. They do not contain the content.
- Rate-limit records: when a new access session is issued, your IP address is converted into an hourly keyed hash (HMAC). The raw IP address is not stored.
- Server logs: request method, route, status code and duration only.
Our server processes your text, images and answers only in memory to produce the answer. It does not store them in its database or logs.
Data stored in your browser. The extension keeps the following on your device:
| Data | Where | How long |
|---|---|---|
| Your latest 20 conversations: messages, selected images, answer status and token/cost usage | Extension IndexedDB (this browser only, not synced) | Older chats are deleted automatically. You can delete chats in History, or remove all data by uninstalling the extension. |
| Recent screen selections (up to the last 8) | Extension session storage | Until pruned or the browser is closed |
| Settings and an anonymous access token | Extension local storage (not synced) | Until the extension is removed |
Cookies and Other Tracking Technologies
We do not use cookies, analytics or tracking technologies.
Information from Third Parties
We receive the AI-generated answers and cost/generation information from OpenRouter. We do not obtain information about you from other sources.
How We Use Your Information
- To generate answers to the questions you ask about the content you select (the extension's single purpose).
- To enforce usage and rate limits and protect the Services from abuse.
- To process and respond to your support inquiries.
We do not use your information for advertising, marketing, profiling, or credit or lending decisions, and we do not sell it.
When We Disclose Your Information
Service Providers.
- OpenRouter and the model provider (Anthropic) receive the request content in order to generate answers. They are subject to their own policies: OpenRouter Privacy Policy, Anthropic Privacy Policy. Our requests use OpenRouter's provider routing setting
data_collection: "deny", so they are only sent to providers that do not store or train on your data. Your data is not used for model training. Deleting your local history does not delete any transient records held by them. - Cloudflare provides the network and security layer for studybuddyai.one. It processes connection data such as IP addresses: Cloudflare Privacy Policy.
- The backend runs on a server operated by the developer.
We do not share your data with anyone else, including for advertising.
Chrome Web Store Limited Use
The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. User data is used only to provide the extension's single purpose (answering your questions about content you select) and is transferred only as described above. It is not sold, not used for advertising, and humans do not read it except when needed for security, to comply with the law, or with your explicit consent.
Permissions
- Site access (all sites) and activeTab: show the selection tool on web pages and capture the visible area you select, only when you ask for it.
- scripting: start the selection tool on tabs that were already open.
- storage: settings, the access token and recent selections.
- contextMenus: show saved conversations from the toolbar icon menu.
Your Choices and Data Subject Rights
There are no accounts, email lists or account preferences. You can delete individual chats in History, and remove all locally stored data at any time by clearing the extension's data or uninstalling it. Because the server-side identifiers are anonymous and not shown to you, we cannot match an individual request to your records; these records are deleted automatically as described under Data Retention. For questions, contact us at the address below.
Security Measures
Connections to our server use HTTPS. Access tokens and installation secrets are stored only as hashes, and IP addresses only as hourly keyed hashes.
Children
Study Buddy is not directed to children under 13 and does not knowingly collect their personal information.
Data Retention
- Request content (text, images, answers): not stored on our server; processed in memory only.
- Access sessions: expire after 30 days unless renewed.
- Duplicate-request records: 24 hours.
- Rate-limit IP hashes: about one hour.
- Installation, session and usage records: deleted automatically after 13 months of inactivity, meaning no use of the extension's service.
- Server logs: rotated automatically (up to 3 files of 10 MiB each).
- Local browser data: as shown in the table above.
Third-Party Links and Services
This page links to the privacy policies of OpenRouter, Anthropic and Cloudflare. Their handling of data is governed by their own policies.
Changes to this Privacy Policy
When this policy changes, we will update this page and the "Last Updated" date above.
Questions About this Privacy Policy
For questions, or bug reports, email [email protected]. The developer is Dmitrii Smelov.