Privacy Policy

Lens is a bring-your-own-key AI side panel. Your messages and the page content you work with go directly from your browser to the AI provider you chose — using your own key. There is no Lens server in between.

What data Lens accesses

Lens accesses data only when you actively use it — when the side panel is open and you invoke it on a page:

• Page content. When you open Lens on a web page, it reads that page's readable text (extracted from the DOM) so the AI can answer questions about it.
• Text selections. If you highlight text and use the selection feature, Lens reads just that selected text.
• Messages you type. The questions and instructions you enter in the Lens chat.

Lens does not run in the background, does not read pages you haven't opened it on, and does not monitor your browsing.

Where your data goes

When you send a message, your text plus the relevant page content (title, URL, and extracted text) is transmitted directly from your browser to the AI provider you configured — Google (Gemini), OpenAI, or Anthropic — over an encrypted connection, authenticated with your own API key. Lens is not a server-side intermediary; the request goes straight to the provider.

What the provider does with that data is governed by their policy, not Lens's. Review whichever you use:

• Google (Gemini): policies.google.com/privacy
• OpenAI: openai.com/policies/privacy-policy
• Anthropic: anthropic.com/legal/privacy

You are responsible for understanding your chosen provider's practices — including whether they retain data or use it for training — and configuring your account there accordingly.

Where your data is stored

Lens stores everything locally in your browser via Chrome's storage APIs:

• Your API key is kept in chrome.storage.local and is used for one purpose only — authenticating your requests to your chosen provider. It never leaves your browser except in those direct requests, and is never sent to us or any third party.
• Your settings (selected provider, model, preferences) live in chrome.storage.local.
• Your conversation exists per tab in the current session and clears when you close or reload the tab, unless you explicitly export it.

What Lens does not do

• No telemetry, analytics, or usage tracking.
• No crash or error reporting to any server.
• No accounts, sign-ups, or profiles.
• No advertising, and no selling or sharing of your data.
• No cross-site tracking.
• No reading of pages when the side panel isn't open.
• No modifying or injecting content into the pages you visit.
• No server, database, or infrastructure that could store your data — none exists.

Permissions Lens requests

• activeTab and host access to <all_urls> — to read page content when you open the side panel on a tab, only when you invoke Lens there.
• storage — to keep your API key and settings locally in your browser.
• sidePanel — to show the Lens chat in Chrome's side panel.
• scripting — to run Lens's content-extraction script on the page when you open the panel.
• contextMenus — to add the right-click entry for asking Lens about selected text.

Children's privacy

Lens is a general-purpose tool, not directed at children under 13, and does not knowingly collect personal information from anyone. If you are a minor, review your AI provider's policies before using Lens with your key.

Changes to this policy

If Lens's data behavior ever changes — for example, if it were to add telemetry or server-side processing — this policy will be updated before that change ships in a release. The date at the top reflects the latest revision.

Contact

Questions about this policy or Lens's privacy practices can be sent to shivamgupta5203@gmail.com.