Extension privacy / Данные расширения

October 27, 2026 · Neuroslop extension 0.14.1 · По-русски

Rollout notice: this notice covers the 0.14.1 release candidate. Google features remain subject to release and Google authorization requirements. Transfer of Google-source passages to website AI actions is not enabled while provider-account and live authorization checks are pending.

This notice supplements the website privacy policy, which identifies the operator, account-data retention and your rights. Contact: info@neuroslop.net.

Checks and consent

A basic check sends selected, pasted or readable page text to neuroslop.net/api/check over HTTPS, without website account cookies. The server processes it in memory, not in the check usage log or through an AI provider. Operational metadata can include IP address, time, text length and result; the general policy explains retention. The extension does not send source-page URLs, browsing history or Google access tokens to Neuroslop.

You can consent to one manual check or save permission for checks you start in Settings. A saved choice removes repeated prompts; it does not start a paid action. Automatic feed checks require a saved site choice and browser permission. They send visible public posts on supported sites, not private-message threads or password fields. Collapsed or unloaded text may be omitted. Background tabs pause checks; minimizing the panel does not. Use Pause, close the panel or disable the site to stop scanning. Results stay in tab memory; the duplicate-text cache is limited to 64 entries and 10 minutes.

Optional Google Workspace connection

The direct connection is available in Chrome, separately from Google sign-in to the Neuroslop website. After you select file types and connect, Google requests https://www.googleapis.com/auth/drive.readonly. This can read all files accessible to the connected account; it is not a Google permission restricted to one selected file. The extension limits its use to a supported file open in the active tab of the focused window. It does not list or crawl Drive, edit files, add comments or install background Drive triggers.

Supported sources are Docs, Sheets, Slides and text-based PDFs opened in Drive. Sheets is limited to the active sheet's A1:AZ300 range. PDFs are limited to 10 MiB and 100 pages; text extraction runs on your device without OCR. The file limit is 120,000 extracted characters, split into bounded passages. Unsupported, oversized, encrypted or textless files may be rejected.

The extension reads the open file's ID, name, type, version and content from Google. IDs and versions detect changes; those file metadata are not sent to Neuroslop. Only extracted passages are sent for checking. When enabled, an active file is checked automatically when needed. Pause and Settings stop it. In-flight requests are cancelled when the tab or window becomes inactive. Working snapshots stay in extension/tab memory, not persistent extension storage. Chrome identity and the extension background process handle the access token; page scripts and our server do not receive it. The extension does not request or store refresh tokens.

Disconnect Google in Settings to stop reads and clear cached tokens. This does not itself revoke Google's account-level grant. Revoke that grant separately in Google account connections, or remove Google-site access in browser settings to block the extension. Website sign-in and extension Drive access are separate controls.

Local editing and website actions

Local editing uses bounded Russian/English rules on your device, without uploading text or spending credits. You review proposed changes and explicitly copy the accepted version. The extension never writes it back to Google. A local edit does not undo an earlier server check.

A separate action transfers a passage to a new website editor or Deep review tab via that tab's sessionStorage, never the URL. Humanization needs a subsequent action and uses the displayed account allowance or credits. Deep review needs a verified account, separate consent and an explicit click; the bot's shared daily limits apply without a coin charge. Automatic checking never starts these AI actions. The general policy describes website drafts and encrypted response recovery, including the applicable 24-hour limit.

A Google-source restriction accompanies passages from the direct connection; an incompatible receiving website refuses the transfer. Such text and derived outputs are excluded from humanize-quality-v2, general quality-review queues, training, tuning and evaluation datasets, even when ordinary sample collection is enabled in your account. Optional AI processing serves only your requested edit or review through OpenRouter endpoints configured to prohibit provider data collection and require zero data retention. If no eligible route is available, it fails without falling back to another provider. These restrictions do not remove the website's separately disclosed, time-limited recovery storage.

We do not sell Google API data or use it for advertising. For information received from Google APIs, we follow the Google API Services User Data Policy, including its Limited Use requirements.

Device storage, permissions and deletion

The operator's separate GA4/Search Console administration connection stores server-side reporting credentials and a report cache. It does not use the extension's Drive token. Its encryption, 30-day cache expiry and server-side deletion procedure are described in the operator-only Google reporting section of the website privacy policy. Disconnecting Google in the extension does not disconnect that administration connection.

• storage.local holds saved manual-send permission, enabled sites, Google connection/file-type choices, panel position/compact state and a seven-day optional-offer dismissal timestamp. These are settings, not browsing history.
• Your exceptions stores an exact phrase/rule pair only when you explicitly save it: up to 200 entries, at most 200 characters per phrase. No surrounding passage, page URL or file ID is saved with it. The dictionary is not sent to Neuroslop or synced to an account. Remove entries in Your exceptions. Temporary hiding stays in memory. Exceptions filter displayed notes, not the score, full report or local-edit proposals.
• storage.session holds a selected-text handoff to the extension's text panel until consumed. Unused handoffs expire after 10 minutes and are pruned on the next import or browser restart.

Text is not otherwise stored in persistent extension storage or extension cloud sync; explicitly saved dictionary phrases are the exception above. Account and payment actions open neuroslop.net. The current extension UI does not poll your balance, copy website cookies or store your password.

activeTab and scripting support the page action and own-site transfer; contextMenus provides the selection action; storage supports settings and handoff. Neuroslop host access enables checks and website transfer. Optional site permissions enable chosen feed/Google features. Chrome identity handles authorization; offscreen runs the packaged local PDF extractor. Executable code is packaged. There are no extension advertising or analytics trackers.

Clear results or close the tab to discard working text. Remove phrases in Your exceptions; disable checks or disconnect Google in Settings. Uninstalling clears local extension settings, not Google's account-level grant. Website drafts, account data and server records use the website's separate deletion controls and privacy policy. Browser session restoration and operating-system snapshots are outside the extension's control.

info@neuroslop.net · Back to extension / К расширению