Skip to content

GPT Master Web Extension: Privacy Policy

Effective Date: May 8, 2026

This policy explains how GPT Master Web Extension handles your information when you use the Chrome extension and related services.

Single Purpose

Extension Purpose: GPT Master Web Extension has a single, focused purpose: to enhance the ChatGPT user experience with productivity tools including smart follow-up suggestions, prompt rewriting, conversation organization (folders, starring/pinning), message timestamps, and conversation management features. The extension does not perform any other functions beyond enhancing ChatGPT productivity and organization.

1. Data We Process

  • Local Extension Data: The extension stores the following on your device using local browser extension storage: conversation organization (folders, conversation mappings, stars/pins, message bookmarks, custom titles, per-conversation notes, message tags), extension settings and preferences, feature usage counters and engagement state, installation metadata, and a small number of one-time consent flags. Internal caches used to speed up features (such as recent-message snapshots used for follow-up generation) are also kept locally and are cleared when you sign out or uninstall.
  • Prompt Library (Local): Prompts you create in the Prompt Library — label, content, and timestamps — are stored locally on your device. Nothing in the Prompt Library is sent to GPT Master servers. You can delete individual prompts or disable the feature in extension settings.
  • Persistent minimap cache: A projected snapshot of conversation messages (truncated previews up to 200 characters per message, heading structure capped at 200 characters per heading, and message role) is stored locally via Chrome extension storage. Full message bodies are not stored, and multimodal content (images, files, attachments) is excluded from the cache. This data is used to display the minimap navigation panel before the live API response returns on revisited conversations. The cache is cleared when you sign out.
  • Enhanced Follow-up Context (Optional): If you choose Enhanced Follow-ups and grant consent, GPT Master sends limited recent message context (for example, the most recent exchanges) plus conversation identifiers to GPT Master APIs to generate follow-up suggestions.
  • Prompt Enhance Context (Optional): When you click the Enhance button (or press the keyboard shortcut), GPT Master sends your current draft prompt and the last few messages of the active conversation to GPT Master APIs to generate a rewritten version. The rewritten text replaces your draft locally; you can revert via the Original pill or browser undo. First use prompts you with a one-time consent dialog before any data leaves the browser.
  • Feedback (Optional): When you submit feedback through the in-extension review prompt, your feedback message (up to 500 characters), your account ID (if signed in), and the extension version are sent to GPT Master APIs. Nothing is sent unless you press Submit.
  • Account Data (Optional): If you sign in with Google, we process account profile fields such as email, name, avatar URL, Google account ID, plan tier, and a session token used for authentication. We also store a stable anonymous client identifier used for analytics and feature-flag assignment, regardless of sign-in state.
  • ChatGPT Page Token: To make authenticated requests on your behalf to ChatGPT, the extension reads ChatGPT's own bearer access token from the ChatGPT page and stores it locally on your device. The token is never transmitted to GPT Master servers; it is used only to call ChatGPT APIs from your browser. It is cleared when you sign out of ChatGPT or uninstall the extension.
  • Analytics and Diagnostic Data: We use Google Analytics 4 (GA4) for usage and reliability analytics. Data sent includes: feature usage events, extension version, feature mode and settings metadata, authentication state and plan tier, your account ID (only when you are signed in), an anonymous client identifier, and technical metadata (for example platform, language, timezone, truncated user agent). An approximate country code is derived server-side from your request's IP address; the extension itself does not perform geolocation lookups. Free-form text (prompt content, message bodies, error messages, stack traces) is stripped from events before they leave your browser. Analytics collection is controlled by the in-product Usage Analytics setting.
  • Web Browsing Scope: GPT Master runs only on ChatGPT pages (chat.openai.com and chatgpt.com) and does not monitor your browsing history on other websites.

2. How We Use Data

  • Provide core extension features such as folders, stars/pins, timestamps, and follow-ups
  • Generate Enhanced Follow-up suggestions when you enable that mode
  • Generate Prompt Enhance rewrites when you invoke the Enhance button or shortcut
  • Process feedback you submit through the in-extension review prompt
  • Authenticate optional account sign-in and support plan/entitlement checks
  • Monitor performance, debug failures, and improve product quality

We do not sell personal data or use extension data for targeted advertising.

2.1. Limited Use Policy

We limit our use of your data to the practices disclosed in this policy. We do not use your data for any purpose other than providing and improving the GPT Master Web Extension service.

3. Data Sharing

  • GPT Master APIs: Enhanced Follow-up requests, Prompt Enhance requests, account and authentication flows, billing and checkout flows, analytics, and feedback submissions communicate with GPT Master API endpoints. Those endpoints, like most modern services, run on third-party hosting and edge infrastructure that processes requests on our behalf.
  • OpenRouter (sub-processor): Enhanced Follow-ups and Prompt Enhance route prompt content through OpenRouter (openrouter.ai), which forwards it to a model provider on our behalf. OpenRouter receives the prompt content and the model identifier; we do not share your account email or other profile data with OpenRouter.
  • Stripe (sub-processor): Subscription checkout and billing management are processed by Stripe. The extension does not collect or store payment card details; checkout takes place on Stripe-hosted pages.
  • Google Services: Google OAuth is used when you choose to sign in, and Google Analytics 4 is used for product analytics and diagnostics.
  • No Data Sale: We do not sell your personal data to advertisers or data brokers.

4. Data Storage & Security

  • On-Device Storage: Core extension state is stored locally on your device using browser extension storage APIs.
  • Server Transmission: When Enhanced Follow-ups, Prompt Enhance, or account sign-in are used, required request data is transmitted to GPT Master services over HTTPS.
  • Enhanced Follow-up Storage Behavior: Limited message context sent for enhanced follow-up generation is not stored as conversation history.
  • Prompt Enhance Storage Behavior: Prompt content sent for rewriting is not retained as conversation history. We keep a per-user weekly counter (used to enforce the free-tier weekly cap) that records the number of Enhance calls and an ISO week identifier — not the prompt text — and we delete counter rows older than eight weeks on a recurring schedule.

5. Data Retention

Data stored locally in the extension remains on your device until you uninstall GPT Master or manually clear Chrome storage. Optional account/session and analytics records may be retained on service providers for operational, security, and legal purposes.

6. Your Rights & Choices

  • Follow-up Mode Control: You can choose Off, Heuristic, or Enhanced follow-up mode in extension settings.
  • Prompt Enhance Control: Prompt Enhance is opt-in per click — nothing is sent until you press the Enhance button or its keyboard shortcut. The first invocation shows a one-time consent dialog you can cancel.
  • Prompt Library Control: You can disable the Prompt Library in settings, and you can delete individual prompts at any time from the Prompt Library manager.
  • Account Control: Sign-in is optional. You can sign out at any time.
  • Local Data Control: You can manage or delete local extension data via browser extension storage tools.
  • Analytics: You can disable Usage Analytics in extension settings at any time.
  • Uninstall: Removing the extension deletes local extension data from your browser profile.

7. Children's Privacy

GPT Master Web Extension is not intended for children under the age of 13. We do not knowingly collect personal information from children.

8. Changes to This Privacy Policy

We may update this privacy policy from time to time. When we make material changes, we will update the "Effective Date" and post the updated policy on this page.

9. Contact Information

Privacy Questions: Contact us at [email protected]. We will respond to privacy-related inquiries within 30 days.

Data Protection Rights: If you are located in the EU, UK, or other jurisdictions with data protection laws, you may have additional rights. Please contact us to exercise these rights.