🛡️ ZERO TELEMETRY 🔒 5 MINIMAL PERMISSIONS 📅 UPDATED: OCTOBER 14, 2026 (v2.4.4.5)

Privacy Policy & Security Disclosure

CodeSavvy is engineered on a strict local-first, minimal-permission architecture. We do not track your browsing history, we do not run analytics or telemetry scripts, and we never sell or store your personal data.

🚫 Zero Browsing Tracking

No analytics SDKs, no telemetry pixels, and no background monitoring of the websites you visit.

💾 100% Local Storage

Your theme settings, custom AI presets, history logs, per-site Zapper rules, and optional API key stay on your device.

⚡ Explicit AI Processing

Text is sent for AI processing only when you explicitly trigger an AI Writing or AI Page Studio action.

🔑 Zero Host Warnings

Requests only 5 narrow permissions—no broad <all_urls> host permissions, no browsingData, and no downloads permission.

1. Information Stored Locally on Your Device

CodeSavvy uses Chrome's built-in local storage APIs (chrome.storage.local and localStorage) to persist your preferences strictly on your machine:

Extension Preferences & Themes: Your chosen UI theme (Light, Dark, System), 7 accent color palettes, and language selection (across 22 locales).
AI Configuration & Optional Gemini API Key: Your selected AI provider (Zero-Setup Free AI vs. Personal Google Gemini Key), custom right-click prompts, Protected Terms dictionary, and global system instructions. If you enter a personal Google Gemini API key, it is stored locally on your device and is automatically excluded when exporting settings backups.
Persistent Element Zapper Rules: CSS selectors for distracting page elements you choose to hide per domain so they can be hidden automatically on future visits.
Transformation History (Optional): Local logs of original vs. enhanced text snippets. You can pause logging at any time using the Incognito Mode toggle in the popup header, configure automatic retention cleanup (1 day to 1 month), or wipe your history in one click.

2. How AI Features Process Text (Dual AI Architecture)

CodeSavvy never reads or transmits webpage content in the background. Text is transmitted only when you explicitly click an AI action in the context menu, press your AI keyboard shortcut, or run an analysis in AI Page Studio:

Option A — Zero-Setup Free AI Tier (Default): When using the built-in Free AI mode (no API key required), your selected text and prompt instruction are sent over encrypted HTTPS to the stateless CodeSavvy Cloud Worker proxy (https://codesavvy-ai.malaadin192.workers.dev) to fulfill the request. The worker enforces anonymous rate limits (50 requests/day and 5 requests/minute burst limit; developer quotes are unlimited) and immediately discards the request payload—no prompts, text selections, or outputs are logged or stored in any database.
Option B — Personal Google Gemini API Key Tier: When you configure your own Google Gemini API key in Settings, requests are sent directly from your browser to Google's official Gemini API endpoint (https://generativelanguage.googleapis.com) using encrypted HTTPS headers (x-goog-api-key), governed by Google's API Terms of Service and Privacy Policy.

3. Minimal Chrome Permissions Justification (v2.4.4.5)

As of version 2.4.4.5, CodeSavvy requires only 5 minimal permissions and zero host permissions (we eliminated legacy downloads, browsingData, and notifications permissions in favor of pure client-side APIs):

Permission	Why It Is Required
`activeTab`	Grants temporary, on-demand access to the currently active tab strictly when you click a tool in the popup, use a context menu item, or press a shortcut.
`scripting`	Executes user-triggered DOM tools (Element Zapper, Unlock Elements, Smart Dark Mode, CSS Inspector, Font Switcher) and registers per-domain Zapper CSS rules.
`storage`	Saves your preferences, custom AI prompts, per-site Zapper rules, and optional transformation history locally in `chrome.storage.local`.
`contextMenus`	Adds the "CodeSavvy" right-click menu when you highlight text on a webpage for quick AI writing modes, case conversions, and Arabic ↔ English keyboard fixing.
`clipboardWrite`	Copies enhanced AI text, sampled HEX/RGB/HSL color codes, inspected CSS snippets, and generated QR code links to your clipboard on click.

4. Data Portability, Deletion & Contact

You have 100% ownership and control over your data at all times:

Clear History or Reset Settings: Use the Clear History or Factory Reset buttons in the CodeSavvy Options page at any time.
Uninstall Cleanup: Uninstalling CodeSavvy from Chrome automatically and permanently erases all local extension storage.
Contact & Open-Source Documentation: Questions or security inquiries can be submitted via GitHub (mahdialaaaldin/codesavvy-docs).