Privacy Policy
Last updated: January 15, 2026
Overview
PromptRoot ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our web application and browser extension.
Information We Collect
1. Authentication Information
When you connect your GitHub account:
- GitHub OAuth tokens: Stored locally in your browser to authenticate API requests
- GitHub username: Used to organize files in repository folder structures
- GitHub user ID: Used for authentication and authorization
2. Website Content (Browser Extension Only)
When you explicitly use the browser extension to capture a webpage:
- Webpage text, images, and links: Captured and converted to Markdown format
- Page URL and title: Included in the capture metadata
- Timestamp: Recording when the capture was made
3. Usage Information
- Repository preferences: Your selected GitHub repositories, branches, and folder paths
- Application settings: Stored locally in your browser
How We Use Your Information
- Authentication: GitHub OAuth tokens authenticate your access to commit content to your repositories
- Content capture: Webpage content is processed locally and either downloaded or sent directly to your GitHub repository
- File organization: Your username organizes captures in repository folders
- Preferences: Settings are stored locally to remember your configuration
Data Storage and Security
- Local storage: All authentication tokens and preferences are stored locally in your browser
- No external servers: We do not store your data on our servers
- Encrypted transmission: All communication with GitHub uses HTTPS encryption
- GitHub storage: Captured content is committed directly to your GitHub repository under your control
Third-Party Services
PromptRoot integrates with the following third-party services:
- GitHub: For authentication and storing captured content. See GitHub Privacy Policy
- Firebase: For OAuth callback handling only. See Firebase Privacy Policy
Data Sharing
We do not sell, trade, or transfer your information to third parties. Your data is only shared with:
- GitHub: When you explicitly choose to commit captured content to your repository
- No other parties: We do not share your data with advertisers, marketers, or any other third parties
Your Rights and Choices
- Access: Your data is stored locally in your browser and in your GitHub repository, both accessible to you at any time
- Deletion: Disconnect your GitHub account or uninstall the extension to remove locally stored data
- Control: You have full control over what content is captured and where it is stored
- Opt-out: Simply disconnect your GitHub account or stop using the service
Browser Extension Permissions
Our browser extension requests the following permissions:
- activeTab: To access the current tab's content when you click to capture
- scripting: To inject content extraction scripts for converting HTML to Markdown
- storage: To store your GitHub authentication tokens and preferences locally
- tabs: To retrieve the current tab's URL and title
- Host permissions: To communicate with GitHub API and Firebase OAuth endpoints
Children's Privacy
PromptRoot is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.
Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of PromptRoot after changes constitutes acceptance of the updated policy.
Contact Us
If you have questions about this Privacy Policy, please contact us through our GitHub repository.