Privacy
What Framesleuth Sidekick collects, what it does not, and who else is involved. Written against the code, not around it.
Last updated 7 August 2026
The short version
- Self-hosted Sidekick is anonymous — no sign-in, nothing that identifies you.
- The hosted service needs an account. We store your sign-in identity, your plan, and a daily request counter. That is what enforces your allowance and honours your subscription.
- We never store the text you work on. It passes through our backend to the model provider and is not written to disk or to a database.
- Screen recordings, drafts, history and settings never leave your browser.
- Banking, healthcare and password-manager sites are blocked by default, and you can block any other.
What we store, precisely
On the hosted service, three tables. That is the whole list — you can read the schema in the open repository.
| What | Why | How long |
|---|---|---|
| Your account identifier from Clerk, your plan, and subscription status | To know which allowance applies to you | Until you delete your account |
| A per-day request counter keyed to that identifier | To enforce the daily allowance | Rolling; old windows are not retained |
| Processed webhook event ids | So a repeated billing event is not applied twice | Short-lived |
What we do not store
One exception, stated because 'never' would be too strong: text extracted from a screenshot is held in memory for up to 24 hours, so running the same image twice does not cost you a second request. It is capped, never written to disk, and gone when the process restarts.
- The text you asked us to rewrite, translate, summarise or explain.
- The model's replies.
- Your screenshots or audio.
- Your screen recordings — those live in your browser's storage and are never uploaded.
- Your drafts, history, settings and Smart Bookmarks learning — all in your browser's local storage.
Who else is involved
Only the model provider ever sees the content you work on. The others see identity or metadata.
| Who | What they receive | Why |
|---|---|---|
| OpenAI | The text, image or audio for that one request | Generates the result |
| Clerk | Your email and sign-in identity | Accounts and sessions |
| Turso | Your account identifier, plan and daily counters | Stores the allowance |
| Our hosting provider | Request metadata in server logs | Runs the service |
Your control
- Delete your account and the record above is erased.
- Clear your local data at any time from the extension's settings — it is your browser's storage, not ours.
- Turn Sidekick off on any site, or leave the default blocks in place.
- Run it yourself. The extension and backend are in the open; self-hosted, none of this applies.
Children
Sidekick is not directed at children under 13, and we do not knowingly collect their data.
Changes
If what we collect changes, this page changes with it, and the date at the top moves. Material changes are announced to account holders by email.