Privacy Policy

The AI Tab Switch browser extension is local-first: everything it knows lives in your browser and never reaches our servers. This website runs without analytics or tracking cookies. If you create an optional account for cloud presets, we store the minimum needed to make that work. We do not sell or rent any data.

The data controller is the operator of aitabswitch.com. For any privacy request, use the contact form.

The extension reads the pages of the AI chat tabs you already have open, solely to show their status (generating, finished, waiting on you) and to deliver prompts you stage yourself. All of it happens inside your browser:

No data leaves your machine. Statuses, previews, queued prompts, screenshots you paste, notes, and settings are kept in the browser’s extension storage on your device. The extension sends no telemetry and contains no analytics, and — apart from the optional LLM triage described next — calls no external servers. Its Firefox listing declares no required data collection. Notifications are generated locally by your browser. Uninstalling the extension deletes its stored data.

Optional LLM triage (off by default). If you switch on “Use LLM” in the extension settings and enter your own OpenRouter API key, the extension sends the text of a finished AI reply to OpenRouter (openrouter.ai) so a free model can classify it (undone work, waiting on your approval, or work on your side), and it fetches the list of currently free models from our public API and from openrouter.ai. The reply text and your key travel directly from your browser to OpenRouter — we never receive, store, or see either — and OpenRouter processes them under its own privacy policy. Your key is stored only in this browser’s extension storage and is excluded from settings exports. Turn the setting off and no such request is ever made.

Update check (on by default). Once a day the extension asks aitabswitch.com for the newest version number so it can tell you when an update is out. The request is a plain GET that carries no identifiers, no cookies, and nothing about your tabs; only our hosting provider’s ordinary connection logs apply (see Hosting above). Switch it off any time under extension settings → Data → “Check for updates daily”.

The extension is not affiliated with the AI services it observes (ChatGPT, Claude, Gemini and others). Whatever you submit to those services is governed by their own privacy policies.

Hosting. aitabswitch.com runs on Cloudflare Workers. Cloudflare processes connection data (such as IP address and user agent) as our hosting provider to deliver and secure the site. Our database (Cloudflare D1) is located in Western Europe.

Accounts (optional). You can use the site and the extension without an account. If you create one, we store: your email address, the display name you choose, a salted password hash (we never see or store your plain password), an email-verification flag, session records (a session token with expiry, plus the IP address and user agent of the sign-in, kept for account security), and any presets you save (a preset name and its settings payload). This data is used only to provide sign-in and preset sync — the legal basis is the performance of that service at your request.

Cookies. The site sets a single session cookie when you sign in. It is strictly necessary for authentication. There are no advertising, analytics, or cross-site tracking cookies.

Fonts. The IBM Plex typefaces are served from our own domain. Pages embed no third-party resources at all — no CDNs, no font services, no trackers.

Contact form. If you write to us via /contact, we store the name you optionally give, your email address, and your message — solely to answer you. The legal basis is our legitimate interest in handling your request; messages are deleted once the matter is settled and nothing requires keeping them.

Account data is kept until you delete your account or ask us to remove it. Sessions expire automatically. Operational logs at our hosting provider are retained only for the short windows Cloudflare uses for security and abuse prevention.

Where the GDPR or similar laws apply, you have the right to access, correct, delete, and receive a copy of your personal data, to restrict or object to its processing, and to lodge a complaint with a supervisory authority. Export and deletion are self-serve on your account page — download a machine-readable copy of your data or delete the account outright, no request needed. For anything else, reach us through the contact form and we will act on your request without undue delay.

If we change this policy, the new version is published here with an updated date. Material changes will be announced on the site.