Privacy Policy

Last Updated: December 28, 2025

By installing and using this extension, you acknowledge and confirm that you:

• Have read and understood this Privacy Policy;
• Agree to the terms regarding the collection, use, and storage of data;
• Agree to the privacy policies of all third-party services involved;
• Possess full legal capacity and authority to make purchases;
• Agree to comply with the federal and local laws of your region, including age restrictions and other requirements;
• Will seek assistance from qualified professionals if you encounter difficulties in fully understanding these terms.

1. Introduction

This Privacy Policy describes how the Google Chrome extension for downloading content from ChatGPT collects, uses, and protects your personal information. By using this extension, you agree to the terms of this Privacy Policy.

2. Data Collection

2.1 Personal Data

We collect the following personal data:

• Email Address — obtained via Google Account during authentication.
• Username (displayName) — obtained via Google Account during authentication.
• User Unique Identifier (UID) — generated by Firebase.

2.2 Purpose of Data Collection

Personal data is used exclusively for:

• Authenticating the user within the extension;
• Managing access levels (free/full version);
• Linking payment transactions to the user account;
• Periodically verifying subscription status.

2.3 Local Data (Not Transmitted)

The term "Not Transmitted" means that the specified data is processed and stored exclusively within your browser's isolated environment on your local device. This data is NOT sent over the network to our servers, the developers, or any third parties. The developers of this extension have no technical means to access, view, or collect this information.

The following data belongs to this category:

• File download history (including technical metadata: Chat URL, Conversation ID, filenames, and save paths);
• Extension settings;
• Cached audio files (temporary);
• History of visited chats;
• Downloaded images and text documents;
• Content of ChatGPT chats;
• Timestamps of login attempts (used locally for brute-force protection and Rate Limiting).
• Technical interaction data (mouse position for dragging panels, scrolling for navigation, and hotkeys for player control) — processed exclusively in the browser's RAM in real-time to ensure interface functionality.

3. Data Storage

3.1 Infrastructure and Storage (Google Firebase)

For secure data management, we utilize Google Firebase (Firestore and Cloud Functions). All data managed by these services is stored on servers located in the United States and is protected by standard Google security protocols and encryption.

The following data is stored in Firebase Firestore:

• Username;
• Email address;
• Access level (free or full);
• Registration date;
• Timestamp of the last subscription check;
• Activity Logs — including the number of downloads and usage frequency of the player/waveform (only for full version users). This data is used to protect against fraudulent chargeback requests.

3.2 Browser Local Storage

The following data is stored locally via the Chrome Storage API and IndexedDB:

• User settings for the extension;
• Download history (local database on your computer - IndexedDB);
• Temporary audio file cache (local database on your computer - IndexedDB);
• History of visited chats.

Important: These databases are local and private to your browser profile. Extension developers do not have access to your local files or databases. This data never leaves your browser and can be deleted via the extension settings or browser settings.

3.3 Retention Periods for Local Data

• Download History: Local history stored in the browser's internal database (IndexedDB) is automatically cleared of records older than 14 days. This ensures data minimization. The downloaded files themselves, saved on your device's hard drive, are not automatically deleted by the extension.
• Audio Cache: Temporary audio files and data used for their merging or processing in IndexedDB are deleted immediately upon the successful completion of the download operation or upon the initiation of a new operation.

3.4 Data Retention Policy (Server-side)

Active Users: Identifiers and technical data are retained as long as your account remains active to ensure continuous subscription verification and support.

Deleted Accounts: Upon account deletion, your data is processed as follows:

• Your email address and username are irreversibly anonymized using a SHA-256 cryptographic hash combined with a unique secret key known only to the server. This prevents the original information from being recovered while allowing us to identify the record for potential legal audits.
• Anonymized technical logs and activity counters are stored for exactly 6 months from the date of deletion. This period is strictly limited by the need to protect against payment disputes (chargebacks) and fulfill financial audit requirements.
• After 6 months, all records associated with that unique identifier (UID) are permanently and automatically deleted from our systems.

4. Data Transfer to Third Parties

4.1 Google Services

Google services are used for authentication:

• Chrome Identity API — for obtaining OAuth tokens.
• Firebase Authentication — for account management.
• Firebase Firestore — for storing minimal user information.

The extension requests the following OAuth Scopes:

• https://www.googleapis.com/auth/userinfo.email (to obtain the email address);
• https://www.googleapis.com/auth/userinfo.profile (to obtain the name and profile photo).

Data is processed in accordance with the Google Privacy Policy.

At any time, you may:

• Sign out of your account within the extension settings;
• Cease using the extension by removing it from the browser;
• Revoke the extension's access to your Google Account via Google Security settings.

4.2 Lemon Squeezy

When purchasing the full version of the extension, your email address is transmitted to the payment service Lemon Squeezy for:

• Generating and processing the payment;
• Sending payment confirmation;
• Subscription management.

Data is processed in accordance with the Lemon Squeezy Privacy Policy.

4.3 OpenAI / ChatGPT

The extension interacts with ChatGPT via the user's existing session to:

• Download audio messages;
• Download text content;
• Download images.

Important:

• The extension does NOT transmit additional data to OpenAI.
• Chat content is managed in accordance with the OpenAI Privacy Policy (for EEA/UK/Switzerland | for other regions).
• Within the scope of the application, downloaded content is stored only locally in your browser and on your device. Developers do not have access to these files.

4.4 Other Third Parties

We do NOT transmit your personal data to any other third parties or services, other than those listed above.

5. Data Usage

5.1 Authentication

Email and name are used to identify the user and manage access to extension functions.

5.2 Subscription Verification

For users with an active subscription, an automatic check of the access status is performed via Firebase Firestore to validate the right to use the full version.

5.3 Network Requests

The extension performs the following types of network requests:

• To Firebase (authentication and database) via HTTPS;
• To Lemon Squeezy (during purchase) via HTTPS;
• To ChatGPT API (for downloading content) via HTTPS.

6. Data Security

We implement the following security measures:

• All network requests are performed exclusively via the secure HTTPS protocol;
• OAuth tokens are stored only in the secure storage of the browser;
• Upon signing out of the account, all tokens are automatically revoked via the Google API;
• Standard security mechanisms of Firebase and Google Cloud are utilized.

The extension does not perform passive monitoring (sniffing) of third-party network traffic and only interacts with the target site (ChatGPT) and the services explicitly listed in this policy.

This extension does NOT use third-party advertising cookies or tracking technologies to collect information about user behavior.
However, for the functioning of authentication and maintenance of the user session, Firebase services may use technical tokens and local storage (Local Storage/IndexedDB).

7. Purchases and Payments

7.1 Buyer Requirements

By making a purchase, you confirm that you have reached the age of full legal capacity in your region.

7.2 Liability for Unauthorized Purchases

• Parents/guardians are responsible for purchases made by minors from their devices.
• To prevent unauthorized purchases, we recommend using parental controls and securing payment information.

7.3 Payment Processing

All payments are processed by the Lemon Squeezy service in accordance with their terms of use. We are not responsible for:

• Technical issues of the payment system;
• Unauthorized purchases from the user's device;
• Disputes between the buyer and the payment system.

8. Changes to the Privacy Policy

We reserve the right to make changes to this Privacy Policy. Regarding material changes, we will notify you by updating the date at the beginning of the document or via a notification within the extension. We recommend checking this page periodically for updates.

9. User Rights and Data Deletion

You have the right to the complete deletion of your account and all associated data stored on our servers (in the Firebase database). To do this, use the "Delete account" button in the extension settings.

Upon performing this action:

1. Your account in the authentication system (Firebase Auth) will be deleted.
2. Your record in the database (Firestore) will be processed according to our Data Retention Policy (Section 3.4), where identifying information is irreversibly anonymized for 6 months before complete deletion.
3. All local extension data will remain on your device until you remove the extension or clear browser data.

This process ensures compliance with financial audit and fraud protection requirements while fulfilling your right to be forgotten.

10. Contact Information

If you have questions or suggestions regarding this Privacy Policy, you may contact us by email: gpt.media.downloader@gmail.com

11. Children's Privacy

Our service is not intended for use by persons under 13 years of age (or 16 years for residents of the European Union). We do not knowingly collect personal data from children. If you are a parent or legal guardian and you become aware that your child has provided us with their personal data, please contact us. Upon discovery of the collection of data from a child without parental consent, we will take necessary measures to delete such information.

12. User Obligations

12.1 Data Accuracy and Account Usage

The user agrees to provide accurate and up-to-date information about themselves. Only the use of one's own accounts and email addresses is permitted. The use of other people's data, accounts, or payment methods is strictly prohibited.

12.2 Compliance with Third-Party Requirements

The user is obligated to comply with the Terms of Use and Privacy Policies of third-party services when using this extension:

• Google: Terms, Privacy Policy
• OpenAI: Terms of Use (for EEA/UK/Switzerland — EU Terms)
• OpenAI: Usage Policies

13. Browser Permissions

To ensure the declared functionality, the extension requests the following technical permissions in the Google Chrome browser:

• downloads: Used to save files requested by the user (audio, text, images) to the device's local disk.
• tabs: Used to detect the presence of an active tab with ChatGPT, allowing activation of extension functions only on relevant pages.
• activeTab: Allows the extension to interact with the content of the current active tab (extract text and media from the chat) only upon the user's explicit request.
• notifications: Used to send system notifications regarding download status (success, errors).
• storage: Used for the local saving of user settings and caching data.
• identity: Used to obtain the user's email address (via Google Account) for verifying subscription status.
• alarms: Used to manage technical background tasks, such as temporary payment status listeners and data synchronization schedules.