Privacy Policy

Last updated: October 2, 2026

TidyChats is built local-first. This policy explains what stays on your device, what we store on our servers, and which third parties help us run the service.

Who is responsible

The controller for personal data processed by TidyChats is the operator named in the Impressum. Contact: [email protected].

Data that stays in your browser

Your conversation content from ChatGPT, Claude, Gemini and Grok, and the full-text search index built from it, are stored in your browser's IndexedDB. It is not uploaded to TidyChats servers, with one exception you control: the Premium AI summaries described below. Uninstalling the extension or clearing site data removes it.

Data we sync

If you sign in, we sync only the items you create inside TidyChats so they follow you across devices:

  • Folders and pinned conversations (titles and identifiers, not message text)
  • Saved prompts and prompt chains
  • Tag rules and tags
  • Message bookmarks
  • Extension settings

Synced data is encrypted at rest using AES-256-GCM. We also store your email address and your license or subscription status.

AI summarization

On premium plans, two actions can summarize a long chat: adding a past chat as context with @@, and “Carry this chat forward” into a new chat. Only when you use one of them, the text of the chat you selected is sent to our server (and, where enabled, to OpenAI) to produce a summary for that single request. We do not store this text and do not use it to train models. On the free plan these summaries are made in your browser, so no conversation text leaves it.

Third-party processors

  • Stripe processes payments and subscriptions. We never see your full card details.
  • Resend delivers transactional email, such as sign-in codes and receipts.
  • Hetzner (Germany) hosts our servers and database.
  • Cloudflare provides DNS and network protection for tidychats.com.
  • OpenAI generates summaries, only when you use @@ context or Carry forward on a premium plan.

What we do not do

  • We do not sell your personal data.
  • We do not run third-party advertising trackers in the extension.
  • We do not store your AI conversations on our servers.

Retention and deletion

Synced data is kept while your account is active. You can delete your account at any time by contacting us, and we will remove your synced data within 30 days, except where we must keep billing records by law.

Your rights

Depending on where you live, you may have rights to access, correct, export or delete your personal data. To exercise them, email [email protected].

Changes

If we make material changes to this policy, we will update the date above and notify signed-in users by email.