Legal

Privacy Policy

Effective date: March 25, 2026 · SubLens Chrome Extension

TL;DR — The Short Version

SubLens reads your browser cookies only to authenticate with AI provider APIs on your behalf.
All data is stored locally in your browser using chrome.storage.local.
No data is ever sent to our servers — we don't have any.
No analytics, no tracking, no advertising.
You can clear all data at any time by removing the extension.

01 Overview

SubLens ("the Extension") is an open-source Chrome extension that helps you track your AI spend, billing dates, and total cost across multiple AI providers. This policy explains what data the Extension accesses, how it is used, and your rights regarding that data.

SubLens is developed and maintained as an open-source project. The full source code is available at github.com/heartleo/sublens.

02 Data We Access

To retrieve your subscription information, the Extension accesses the following data in your browser:

🍪 Session cookies — Read-only access to authentication cookies for the following domains: chatgpt.com, claude.ai, github.com, cursor.com, and one.google.com. These cookies are used solely to make authenticated API calls to each provider on your behalf.
📡 Provider API responses — The Extension calls official or publicly accessible API endpoints of each provider to retrieve your subscription plan, billing date, and price.

The Extension does not access passwords, payment card numbers, personal identification details, browsing history, or any data outside of the above.

03 How Data Is Used

All data retrieved by the Extension is used exclusively to display your subscription information in the Extension popup. Specifically:

💾 Subscription data is stored locally using chrome.storage.local. It never leaves your device.
🔄 Data is refreshed automatically once per hour via a background alarm, and on-demand when you trigger a manual refresh.
🖥 Data is displayed only within the Extension popup on your device.

04 Data Sharing

SubLens does not share, sell, transmit, or disclose your data to any third party — ever. There are no external servers, databases, analytics services, or advertising networks involved.

All network requests made by the Extension go directly from your browser to the respective AI provider's own servers (e.g., api.openai.com, api.anthropic.com). No intermediary servers are used.

05 Permissions Explained

The Extension requests the following Chrome permissions:

cookies Read session cookies from AI provider domains to authenticate API calls.

storage Save subscription data and your card order locally using chrome.storage.local.

alarms Schedule an hourly background refresh of subscription data.

host permissions Make authenticated fetch requests to chatgpt.com, claude.ai, github.com, cursor.com, and one.google.com.

06 Data Retention & Deletion

Subscription data persists in chrome.storage.local until you remove the Extension or clear Chrome's extension storage. To delete all data stored by SubLens:

🗑 Go to chrome://extensions → find SubLens → click Remove. All locally stored data is permanently deleted.

07 Children's Privacy

SubLens is not directed at children under the age of 13. We do not knowingly collect any information from children. If you believe a child has used this Extension, please contact us and we will provide guidance on removing the Extension and its data.

08 Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by an updated effective date at the top of this page. Continued use of the Extension after any changes constitutes your acceptance of the updated policy.

For significant changes, we will provide notice via the Extension's GitHub repository.

09 Contact

If you have questions or concerns about this Privacy Policy or the Extension's data practices, please reach out via:

GitHub Issues: github.com/heartleo/sublens/issues