1. Introduction

RepoToPrompt ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy outlines how the RepoToPrompt Chrome Extension operates regarding data collection, storage, and security. By using the RepoToPrompt Chrome Extension, you agree to the practices described in this policy.

2. Data Collection and Usage

RepoToPrompt is designed with privacy-first architecture. We do not collect personal identification information (PII) or track user activity.

• GitHub Personal Access Tokens (PAT): If you choose to enter a Personal Access Token in the extension Settings to access private repositories or increase API rate limits, the token is saved 100% locally in your browser's isolated storage (chrome.storage.local). It is used exclusively to authenticate HTTPS requests directly between your browser and GitHub's official REST API (api.github.com). It is never sent to any third-party server.
• Repository Files and Source Code: Source code files and tree metadata are fetched directly from GitHub's servers (raw.githubusercontent.com and api.github.com) into your browser's local memory. The extension processes code client-side to generate prompts. No source code or repository data is ever uploaded to any external server or saved remotely.
• Custom Exclusion Rules and Settings: User preferences, such as custom directory exclusions and prompt instruction templates, are saved locally in chrome.storage.local to preserve your settings across browser sessions.

3. Chrome Extension Permissions

RepoToPrompt requests only the minimum necessary permissions required to provide its core functionality:

• storage: Required to persist your local extension settings, exclusion rules, and optional PAT token locally in your browser.
• activeTab & scripting: Required to detect the active tab's GitHub repository URL and scrape the currently selected branch name.
• declarativeNetRequest: Required to set Cross-Origin Resource Sharing (CORS) headers for direct browser-to-GitHub raw file extraction.
• Host Permissions (*://api.github.com/*, *://raw.githubusercontent.com/*, *://github.com/*): Required to communicate directly with official GitHub APIs and raw content servers.

4. Analytics, Cookies, and Third-Party Tracking

RepoToPrompt contains zero analytics scripts, zero tracking pixels, zero cookies, and zero advertising SDKs. We do not track user interaction, session duration, or usage statistics.

5. Third-Party Services

All network requests made by the extension are directed exclusively to GitHub's official APIs and content servers:

• api.github.com
• raw.githubusercontent.com
• github.com

These interactions are governed by GitHub's Official Privacy Statement.

6. Data Security

Your data remains strictly within Chrome's sandboxed local storage ecosystem. Because we do not operate external databases or backend servers for this extension, there is zero risk of server-side data breaches or unauthorized data leaks.

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect functional updates or regulatory requirements. Any updates will be published on this page with an updated effective date.

8. Contact Us

If you have any questions or concerns regarding this Privacy Policy, please contact us at:

📧 Email: exodusdevlabs@gmail.com