Privacy Policy

Last Updated: September 25, 2026

Core Privacy Guarantee: Cross Context does not collect, transmit, sell, or analyze your conversation history or prompts. All data extraction and injection processes execute locally within your browser.

1. Overview and Core Commitment

Cross Context is designed from the ground up as a client-side utility. Unlike traditional AI extensions that route user queries through intermediary cloud proxy servers, Cross Context utilizes direct client-side DOM interaction and Google Chrome Manifest V3 APIs to operate entirely inside the user's browser sandbox.

2. Data Collection and Telemetry

We collect zero personal data. Specifically:

No Cloud Storage: We operate no external databases or servers that receive your scraped conversation states, messages, system prompts, or token metrics.
No Analytics Tracking: The Cross Context website and browser extension contain no Google Analytics, tracking pixels, Facebook Pixel, Mixpanel, or third-party telemetry scripts.
No Account Required: You do not need to register, provide an email address, or create an account to use the open-source extension or documentation.
No Ad Networks: We do not serve advertisements, nor do we partner with data brokers or advertising networks.

3. Local Data Storage & Isolation

When you capture a conversation context or generate a handoff packet:

The extracted packet is stored temporarily in your browser's local memory or `chrome.storage.local`.
Data saved in `chrome.storage.local` is bound to your browser profile and is never synced across Google accounts or external servers unless you manually export a JSON file.
You can inspect, modify, or permanently purge saved context packets at any time via the extension popup or the Context Inspector in your browser.

4. Browser Permissions (Manifest V3)

Cross Context requests only the minimal set of browser permissions required to perform DOM scraping and context injection:

activeTab / scripting: Used exclusively to execute the DOM content scraper on recognized AI interface domains (chatgpt.com, claude.ai, gemini.google.com, grok.com, perplexity.ai) when initiated by user action.
storage: Used to retain your local preferences and recent context handoffs on your machine.

5. Open Source Auditing

Every line of code powering Cross Context is open source under the MIT License and publicly viewable on GitHub. We encourage security researchers, developers, and users to audit our repository, examine build artifacts, and verify our zero-telemetry claims firsthand.

6. Contact Regarding Privacy

If you have questions, feedback, or concerns regarding our privacy architecture, please contact us at:

Email: privacy@cross-context.dev
Mailing Address: Cross Context Project, San Francisco, CA 94105, United States