RewriteRex — Privacy Policy

RewriteRex is a Chrome extension that translates, rewrites, summarizes, and explains text you select on a web page, using your own OpenAI-compatible API key (BYOK — bring your own key).

RewriteRex has no backend server and collects no personal data. Everything runs in your browser. We — the developer — never receive, store, or have access to your API key, your selected text, or any of your activity.

• Your API key, endpoint, model, and preferences are stored locally in your browser via chrome.storage.local. They are never transmitted to us or to any third party other than the API endpoint you configure (for authentication of your own requests).
• Text you select is sent only to the API endpoint you configure (e.g. OpenAI, DeepSeek, OpenRouter, or another OpenAI-compatible service), and only at the moment you explicitly trigger an action (right-click menu or keyboard shortcut). It is sent directly from your browser to that endpoint over HTTPS. It does not pass through any server operated by us.
• Your last-used action and UI language are stored locally so the extension can repeat your last action and remember your language choice. They never leave your browser.

When you trigger an action, your selected text is sent to the LLM provider whose endpoint and API key you supplied. How that provider handles your text is governed by their privacy policy and terms — not ours. Please review the privacy policy of the provider you choose (for example, OpenAI, DeepSeek, or OpenRouter). We have no visibility into or control over that provider's processing.

• contextMenus — to add the RewriteRex right-click menu.
• storage — to save your settings locally (see above).
• activeTab / scripting — to read the text you selected and show the result panel on the current page when you invoke an action.
• Access to web pages — the extension can run on pages you visit so it can read your current text selection. It only acts on the text you explicitly select and only when you trigger an action; it does not read, log, or transmit page content in the background.
• API domain access — RewriteRex declares no broad host permission at install time. Access to your chosen API domain is requested at runtime (optional_host_permissions), scoped to that single origin, so the extension can send your request to it.

• No analytics, telemetry, tracking, cookies, or advertising.
• No selling, sharing, or transfer of any user data — we never receive it.
• No remote code execution; all logic ships inside the extension.
• No use of your data for any purpose unrelated to performing the action you requested.

Because there is no server, we retain nothing. All data lives in your browser's local storage and is removed when you clear the extension's data or uninstall the extension. You can edit or remove your API key at any time from the extension's Options page.

RewriteRex is a general-purpose productivity tool and is not directed at children under 13.

If this policy changes, the "Last updated" date above will be revised. Material changes will be reflected here before they take effect.

Questions about this policy? Email nick@nickdevlab.com or open an issue on the project repository.