Privacy Policy

Last updated: March 18, 2026

1. Overview

ChatShell is a local-first ChatGPT export tool. Conversation content is processed in your browser for export and is not sold or shared with advertisers.

2. Data Access & Processing

We do not collect or upload conversation content to developer servers. Export runs only when you initiate it.

• Exports are generated locally in your browser and only run when you initiate an export.
• To generate exports, the extension reads ChatGPT page data and may use ChatGPT access tokens and account headers already present in the page. These stay in memory and are never sent to developer servers.
• The extension runtime does not use third-party analytics or advertising SDKs. The website uses Google Analytics 4 for aggregate traffic measurement only. Conversation content is not collected or sent to developer servers.

3. Local Storage

The extension uses browser storage to save:

• Language preference (stored in chrome.storage.sync)
• License Key (stored in chrome.storage.sync; syncs across devices if browser sync is enabled)
• License status and local instance ID (stored in chrome.storage.local and chrome.storage.sync)
• Free-plan usage counters and changelog seen state (stored in chrome.storage.local)

We do not store exported files or conversation content in extension storage.

4. Third-party Services

When you activate, validate, or deactivate a license, we send the license key and instance ID to our Cloudflare Worker, which calls Creem for license verification. To support activation recovery, subscription expiry handling, and deactivation, the Worker also stores license-to-product, subscription-to-license, and license-to-instance mappings in Cloudflare KV for up to two years. The website also uses Google Analytics 4 to measure aggregate visits and traffic sources. No conversation content is sent to developer servers.

5. Network Requests & Security

Exports access chatgpt.com and related ChatGPT endpoints needed to load conversations and workspace metadata; license checks reach our license service and Creem; the website loads Google Analytics 4. All requests use HTTPS.

6. Limited Use

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

7. Contact Us

If you have any privacy-related questions, please contact [email protected].