ArcPanel Privacy Policy

Scope

This policy covers the ArcPanel Chrome extension and the public ArcPanel website pages linked from the Chrome Web Store listing.

Core tools are local-first: JSON, JWT, regex, URL, Base64, word count, color picker, screenshot frame, GIF creation, notes, todos, clipboard history, and similar browser utilities run locally in your browser or extension context unless this policy says otherwise.
Remote transfer happens only for specific optional features: AI requests, account registration for AI usage syncing, payment checkout, browser sync for snippets, and website analytics on public site pages.
ArcPanel does not sell user data: ArcPanel does not sell data, does not transfer data to data brokers, and does not use extension data for personalized advertising or creditworthiness decisions.

What ArcPanel Collects

The exact data ArcPanel handles depends on which feature you use.

Data Type	What ArcPanel Handles	Why
Active page context and browsing activity	Current page title, URL, domain, selected text, whether the page appears to contain video, code, or forms, and page theme color.	To route you into the right tool, prefill page-aware actions, support selected-text workflows, and power capture flows beside the page you are using.
Clipboard history	Copied or pasted text, timestamp, inferred type, and the source page title and URL associated with a clipboard item.	To let you reopen recent clipboard items inside ArcPanel.
User-generated content stored locally	Notes, todo items, drafts, snippet text and expansions, tool preferences, onboarding state, and other settings you choose to keep in ArcPanel.	To persist the tools you use and restore your last state on the device.
Authentication and configuration data	BYOK API key, AI provider URL, selected AI model, and ArcPanel AI token if you register for synced AI usage.	To connect the AI features you choose to use. BYOK credentials are stored locally on your device.
AI prompts and AI context	Your prompt, recent AI message history, and any page context included with the request, such as selected text, current page title, and current page URL.	To generate an AI response when you explicitly use ArcPanel AI or a BYOK AI provider.
Optional account and payment data	Email address for ArcPanel AI registration, plan status, usage counters, and Stripe customer reference if you upgrade. ArcPanel does not collect or store your payment card number.	To save usage across devices, enforce usage limits, and manage paid plan status.
Website analytics on public site pages	Standard visit analytics for public website pages that load analytics, such as page path and referrer handled by the analytics provider.	To understand traffic to public ArcPanel website pages. The extension itself does not send analytics to Plausible.

What ArcPanel Does Not Do

No unrelated browsing surveillance: ArcPanel uses current-page context only to provide page-aware features described in the Chrome Web Store listing and extension UI.
No form-value harvesting by default: ArcPanel may detect that a page contains a form so it can route you correctly, but it does not collect form field values or passwords just because a form is present.
No public disclosure of secrets: ArcPanel does not intentionally expose authentication information, payment information, or private prompts publicly.
No sale or ad targeting: ArcPanel does not sell extension data and does not use it for personalized advertising.

Storage and Retention

Where Data Lives	Examples	Retention
Extension local storage on your device	Notes, todos, drafts, onboarding state, AI settings, local tool state, and fallback clipboard/snippet state.	Until you delete it in ArcPanel, clear browser or extension storage, or uninstall the extension.
Chrome extension storage.local	Clipboard history, stored locally in the extension.	Kept locally until you clear it. ArcPanel keeps up to 200 clipboard items in extension storage.
Chrome extension storage.sync	Custom snippets and snippet expansions.	Kept until you delete them. If browser sync is enabled, they may sync through your browser account.
Session storage on your device	Recent AI conversation history used to preserve the current session.	Current browser session only. ArcPanel keeps up to the latest 20 conversation messages in session storage.
ArcPanel AI service on Cloudflare	Registered email, plan status, Stripe customer reference, and usage counters for ArcPanel AI.	Registered user records are retained for up to 12 months. Usage counters used for rate limiting are retained for up to 48 hours.
Local token storage on your device	ArcPanel AI authentication token after registration.	Stored locally until removed. Tokens are issued with a 30-day lifetime.

Who Data Is Shared With

ArcPanel only shares data with third parties when that sharing is required for a feature you choose to use.

Recipient	What They May Receive	When
User-configured AI provider OpenAI-compatible endpoint you enter	Your AI prompt, included context such as selected text, current page title and URL, recent AI conversation history, and the API key you chose to send with the request.	Only when you enable BYOK mode or otherwise choose a direct provider connection.
ArcPanel AI service Cloudflare-hosted ArcPanel service	Your AI prompt, included page context, recent AI conversation history, ArcPanel AI token, optional registration email, plan status, and usage metadata. Cloudflare also receives ordinary request metadata such as IP address and user agent in the course of serving requests.	Only when you use ArcPanel AI instead of BYOK mode.
Anthropic	AI prompt and included context forwarded by ArcPanel AI for model inference.	Only when you use ArcPanel AI.
Google Chrome Sync or your browser sync provider	Snippet content and snippet metadata you save to synced extension storage.	Only for data stored in chrome.storage.sync and only if browser sync is enabled for your profile.
Stripe	Payment and checkout information you enter on Stripe-hosted checkout pages, plus plan-related identifiers needed to match a purchase to an ArcPanel AI account.	Only when you choose to upgrade or pay for ArcPanel AI. ArcPanel does not store your card number.
Plausible	Public website analytics for ArcPanel website pages that load Plausible analytics scripts.	Only when you visit those public ArcPanel website pages. The extension itself does not load Plausible.

How ArcPanel Uses Data

To provide the feature you asked for: route to the right tool, prefill the right inputs, store your notes or snippets, reopen clipboard history, or answer an AI request.
To remember state on your device: restore notes, todos, snippets, drafts, onboarding state, and saved settings.
To manage optional AI access: enforce daily limits, recognize registered users, and enable paid plan status where applicable.
To process optional payments: Stripe handles checkout when you choose a paid plan.
To support security and abuse prevention: short-lived usage counters and ordinary server request metadata may be used to protect the service.

Limited Use Statement

Allowed use: ArcPanel uses page context, selected text, website content, user-generated content, and other handled data only to provide or improve the user-facing features described in the Chrome Web Store listing and in the extension UI.
Allowed transfer: ArcPanel transfers handled data only when needed to provide the requested feature, such as a user-chosen AI request, browser sync, payment checkout, or security and abuse prevention.
No advertising use: ArcPanel does not use or transfer handled data for personalized advertising, retargeting, profiling, or sale.
No ordinary human review: ArcPanel does not allow humans to read handled content except when a user asks for support involving specific data, when required for security investigation, or when required by law.

Security

HTTPS for remote transfers: ArcPanel uses secure connections for the remote endpoints it calls, such as ArcPanel AI, user-configured AI providers, Stripe checkout, and public website delivery.
Local secrets stay local unless you use them: BYOK API keys are stored locally on your device and are only sent to the provider endpoint you configured when you submit an AI request.
Least transfer possible: most tools do not send data off device at all.

Your Choices

Do not use AI: ArcPanel remains useful without ArcPanel AI or BYOK mode.
Clear local data: you can delete notes, todos, snippets, drafts, clipboard history, and AI settings from the extension or by clearing extension storage and uninstalling the extension.
Delete server-side ArcPanel AI account data: email [email protected] from the address you used to register and request deletion.
Use BYOK instead of ArcPanel AI: if you prefer, you can direct AI traffic to your own configured provider instead of ArcPanel AI.

Contact

Questions about privacy, data handling, or deletion requests can be sent to [email protected]. General support details are on support.

Privacy Policy for ArcPanel