Legal

Privacy Policy

Effective date: August 27, 2026 · SubLens Chrome Extension

TL;DR — The Short Version

SubLens requests access only when you choose to connect a subscription provider.
All data is stored locally in your browser using chrome.storage.local.
No data is ever sent to our servers — we don't have any.
No analytics, no tracking, no advertising.
You can clear all data at any time by removing the extension.

01 Overview

SubLens ("the Extension") is an open-source Chrome extension for launching AI tools and optionally tracking subscription details from providers you connect. This policy explains what data the Extension accesses, how it is used, and your rights regarding that data.

SubLens is developed and maintained as an open-source project. The full source code is available at github.com/heartleo/sublens.

02 Data We Access

To retrieve subscription information, the Extension can access the following data after you explicitly connect a provider:

🔐 Authentication state — Host access lets the Extension make authenticated requests to the provider you connected. Chrome attaches that provider's existing sign-in state to requests; the Extension does not read or store session-cookie values.
📡 Provider API responses — The Extension calls official or publicly accessible API endpoints of each provider to retrieve your subscription plan, billing date, and price.

The Extension does not access passwords, payment card numbers, personal identification details, browsing history, or any data outside of the above.

03 How Data Is Used

All data retrieved by the Extension is used exclusively to display your subscription information in the Extension popup. Specifically:

💾 Subscription data is stored locally using chrome.storage.local. It never leaves your device.
🔄 Data is refreshed only when you trigger it — using the refresh button in the Extension popup, or by connecting/reconnecting a provider.
🖥 Data is displayed only within the Extension popup on your device.

04 Data Sharing

SubLens does not share, sell, transmit, or disclose your data to any third party — ever. There are no external servers, databases, analytics services, or advertising networks involved.

All network requests made by the Extension go directly from your browser to the respective AI provider's own servers (e.g., api.openai.com, api.anthropic.com). No intermediary servers are used.

05 Permissions Explained

The Extension requires local storage. Favicon access and provider-specific host access are optional and requested only when you use the feature that needs them:

storage Save favorites, recent launches, usage counts, preferences, and subscription snapshots locally using chrome.storage.local.

favicon (optional) Show a custom tool's site icon next to its name when you choose the favicon icon option while adding it.

host access (optional) Make authenticated requests only to subscription providers you connect: chatgpt.com, claude.ai, github.com, or cursor.com.

06 Data Retention & Deletion

Subscription data persists in chrome.storage.local until you remove the Extension or clear Chrome's extension storage. To delete all data stored by SubLens:

🗑 Go to chrome://extensions → find SubLens → click Remove. All locally stored data is permanently deleted.

07 Children's Privacy

SubLens is not directed at children under the age of 13. We do not knowingly collect any information from children. If you believe a child has used this Extension, please contact us and we will provide guidance on removing the Extension and its data.

08 Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by an updated effective date at the top of this page. Continued use of the Extension after any changes constitutes your acceptance of the updated policy.

For significant changes, we will provide notice via the Extension's GitHub repository.

09 Contact

If you have questions or concerns about this Privacy Policy or the Extension's data practices, please reach out via:

GitHub Issues: github.com/heartleo/sublens/issues