01Overview & Commitment to Privacy#
AIbar ("we", "our", or "the extension") is a Chrome Extension designed to unify multi-model AI workflows. It allows users to chat with multiple AI service providers simultaneously, broadcast prompts, execute region screen captures, and utilize API-based completions in a customizable side panel interface. We respect your privacy. AIbar operates with a zero-telemetry, zero-tracking, and privacy-first architecture. We do not run any external tracking services, remote telemetry servers, analytics services, or proprietary backends. All data stays strictly local to your web browser or flows directly to the services you explicitly choose to interact with.
02Information We Do NOT Collect#
- No Personal Identifiable Information (PII): We do not collect names, email addresses, IP addresses, or account profiles.
- No Browsing History: We do not track, record, or monitor the websites you visit or your browsing activity.
- No Prompt Logging: We do not harvest, inspect, store, or transmit your prompts, queries, or chat conversations on any central server.
- No Third-Party Analytics: We do not use Google Analytics, Mixpanel, Segment, or any tracking SDKs.
- No Sale or Commercialization of Data: Your data is never sold, traded, or transferred to advertisers or data brokers.
03Local Data Storage & Retention#
AIbar uses Chrome's native chrome.storage.local API to persist user settings locally on your device:
- User Interface Preferences: Active layout modes (1-pane, 2-pane, grid) and selected AI tab visibility.
- Custom Provider Configurations: User-added custom AI web app URLs and names.
- OpenRouter Settings (Optional): OpenRouter API Key (
orApiKey) and Model Selection/Chat History (orChatHistory, capped locally at 50 messages).
All data stored via chrome.storage.local remains on your local machine and can be cleared at any time by clearing your extension storage or uninstalling the extension.
04How Third-Party Services & APIs Function#
- Embedded AI Web Providers (Iframes): AIbar loads official AI web interfaces (ChatGPT, Claude, Gemini, DeepSeek, Qwen, Copilot, Kimi, Perplexity, Meta AI, Z.ai) inside side panel iframe containers. Session cookies and login credentials are managed directly between your browser and the respective provider. AIbar never intercepts, reads, or stores your credentials.
- OpenRouter BYOK Integration: If you choose to use OpenRouter, requests are sent directly from your browser to
https://openrouter.ai/api/v1over HTTPS using your personal API key. - Site Favicons: Uses standard Google Favicon endpoints (
https://www.google.com/s2/favicons) passing only the public domain name.
05Chrome Extension Permissions Justification#
| Permission | Purpose & Technical Justification |
|---|---|
| sidePanel | Enables rendering of the AIbar multi-pane workspace inside Chrome's side panel. |
| storage | Saves user UI layout preferences, active tabs, custom provider links, and optional OpenRouter API keys locally. |
| contextMenus | Adds the right-click "Send selection to AIbar" option to send selected text directly to AI input boxes. |
| scripting | Enables content script injection to paste text, insert captured region images, or attach files into AI prompt inputs. |
| activeTab & tabs | Allows taking screen region captures (crop tool) and opening dedicated login popups when web providers require full-page OAuth authentication. |
| declarativeNetRequest | Allows adjusting frame headers (X-Frame-Options, Content-Security-Policy) strictly for supported AI provider domains so their web interfaces can embed into side panel frames. |
| host_permissions [<all_urls>] | Required for frame header modification across supported AI domains, region screen capture overlay injection, and reading user-selected text via right-click context menu across any active webpage. |
06Authentication & Third-Party Logins#
Some AI web services enforce OAuth or single-sign-on (SSO) login barriers (e.g., Google or Apple Login) that cannot complete inside an embedded iframe. AIbar detects authentication triggers and provides a "Popout Login" button that opens the official login page in a standard full browser tab. Once authenticated in your browser, session cookies are shared with the side panel iframe per standard browser behavior. AIbar never intercepts, records, or sees your credentials.
07User Control & Data Deletion#
You retain complete control over your data:
- API Key & History Removal: You can clear your stored OpenRouter API Key and chat history directly from the OpenRouter settings panel inside AIbar.
- Complete Extension Reset: Uninstalling AIbar or clearing browser extension data instantly and permanently deletes all stored preferences, custom providers, API keys, and local history from your device.
08Children's Privacy#
AIbar does not knowingly collect or solicit data from children under the age of 13. The extension is a general productivity tool intended for adult users and professionals.
09Changes to This Privacy Policy#
We may update this Privacy Policy from time to time to reflect changes in extension features or regulatory requirements. Any updates will be published with a revised "Last Updated" date.