Last updated: June 2026
This section describes exactly what the ToneSwap Chrome extension collects, how it is handled, where it is stored, and who it is shared with.
What it collects
Text you select and submit. When you choose to rewrite a selection, that text is sent to our servers to generate the rewrite. The extension does not read text you do not explicitly select and submit.
Account email. Collected only if you sign in or connect a ToneSwap account through the extension.
Anonymous device identifier. A random ID generated locally to count usage. Not linked to your identity unless you sign in.
Site hostname. The hostname of the page where you use the extension (for example mail.google.com). We never collect the full URL, the page path, or the content of pages you visit.
Aggregate usage events. The tone selected, word count of a rewrite, and install or update events.
The extension does not collect your browsing history, keystrokes, form inputs, or any data from pages other than the text you choose to rewrite.
How it is handled
Selected text is used solely to generate your rewrite and return it to you. Your email identifies your account and applies your plan and credits. The anonymous device ID and hostname are used only for aggregate product analytics to understand which features are used.
We do not sell or transfer this data to third parties for purposes unrelated to the extension. We do not use it for advertising, and we do not use it to determine creditworthiness or for any lending purpose. Our use of data obtained through the extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.
Where it is stored
Your session token, account record, anonymous device ID, and analytics preference are stored locally in your browser using chrome.storage.local. They stay on your device and are removed when you sign out or uninstall the extension.
Selected text you submit is processed on our servers to generate the rewrite. For signed-in users, rewrite history is saved to your account and deleted when you delete your account. We do not otherwise retain the content of your rewrites. See Data retention below.
Who it is shared with
Anthropic. Receives the text you submit in order to generate the rewrite. Subject to Anthropic's privacy policy.
PostHog (EU). Receives anonymous analytics events only: the device ID, site hostname, tone, and extension version. Never your selected text and never full URLs.
We do not sell your data and do not share it with any other third parties. You can turn off analytics at any time from the Anonymous analytics toggle in the extension popup.
Email address. Collected when you create an account.
IP address. Used to enforce rate limits for guest users. Not stored long-term.
Text you submit. Sent to our AI provider to generate a rewrite. We do not store the content of your paraphrases beyond your saved history.
Writing samples. Stored on your account to build your voice profile. Never shared or used to train other profiles.
Payment information. Handled entirely by Stripe. We never see or store your card details.
To provide the rewriting, composing, and voice matching service.
To enforce daily usage limits and prevent abuse.
To process subscription and credit purchases through Stripe.
To send transactional emails (account confirmation, receipts, weekly digests).
We do not sell your data or use it for advertising.
Account data is kept for as long as your account is active.
Rewrite history is stored for logged-in users and deleted when you delete your account.
Writing samples and voice profiles are deleted when you delete your account.
IP-based rate limit counters reset daily and are not retained.
Anthropic. Processes the text you submit to generate rewrites. Subject to Anthropic's privacy policy.
Stripe. Handles all payment processing. Subject to Stripe's privacy policy.
PostHog. Product analytics to understand how features are used. Hosted in the EU. No personal data is shared. Used both on the website and inside the browser extension (anonymous device ID, the website hostname where the extension was used, tone selected, and aggregate usage events; never the text you rewrite or the URL path of the page). You can opt out inside the extension popup under Anonymous analytics.
Google Analytics. Aggregate visit and traffic-source metrics. Subject to Google's privacy policy.
Resend. Delivers transactional and digest emails.
Authentication. We store your session token in your browser's localStorage, not in a cookie. It is removed when you sign out or clear site data.
Analytics cookies (PostHog). Set on first visit (ph_*) to anonymously distinguish browsers so we can measure feature usage. No personal data attached.
Analytics cookies (Google Analytics). Set on first visit (_ga, _gid) for aggregate traffic metrics.
Stripe checkout. Stripe sets its own cookies on its checkout pages for fraud prevention. We do not see them.
No advertising cookies. We do not run ads or use ad-targeting cookies.
You can block any of these by disabling third-party cookies in your browser settings or by using a content blocker. The product still works without them. Sign-in continues to work because authentication uses localStorage, not cookies.
You can delete your account at any time from Settings. Deleting your account removes your email, writing samples, voice profiles, rewrite history, and any unused credits.
Questions about this policy? Email hello@toneswap.app.