Privacy Policy

1. What the extension reads

The extension runs only on these domains:

• character.ai
• beta.character.ai
• plus.character.ai
• neo.character.ai
• characterai.io

When you visit one of those pages, the extension reads:

• The page URL, to detect which character you are viewing.
• The Authorization: Token … HTTP header that Character.AI’s own client attaches to its API requests. The extension captures this from within your active browser session and replays it on subsequent requests to Character.AI’s API. This is the same authentication mechanism Character.AI’s website uses; the token is not generated, decoded, or transmitted anywhere else.
• Character data returned by Character.AI’s API — character name, tagline, description, greeting, definition (if creator has made it public), and avatar URL.
• Avatar image bytes, fetched from characterai.io, to embed in the PNG character card.

2. What the extension does not do

• It does not transmit your characters, conversations, or any Character.AI personal data to any external server. The only data sent externally is anonymous usage telemetry described in §6.
• It does not collect personally identifiable information such as your name, email address, location, or general browsing history.
• It does not read your Character.AI password or cookies.
• It does not read data from any website other than the Character.AI domains listed above.
• It does not modify Character.AI’s content or send messages on your behalf.
• It does not persist the captured Authorization token across page reloads — the token lives only in a <meta> tag on the current page and is discarded when you close or navigate away.

3. Where exported data goes

• Exported .json and .png files are saved to your local Downloads folder via the browser’s standard download mechanism. No copies are sent elsewhere.
• It is your responsibility to handle these files appropriately — they may contain character definitions written by you or, if the creator chose to make them public, by other Character.AI users.
• When you subsequently upload a file to a third-party platform such as CrushOn.AI, SillyTavern, RisuAI, or Chub.ai, that platform’s privacy policy governs how it handles the file. The extension is not involved in that upload step.

4. Permissions justification

5. Third parties

The extension communicates with the following external services only:

• Character.AI servers (the domains listed in §1) — to read character data and fetch avatar images, on demand when you click an export button.
• Google Analytics 4 (google-analytics.com) — to send anonymous usage telemetry described in §6.

No other third party is contacted from within the browser session.

6. Analytics and usage telemetry

The extension uses Google Analytics 4 (via the Measurement Protocol API) to collect anonymous usage statistics that help us understand how the extension is being used and improve it.

What is collected

• Event names: a small fixed set of events such as extension_installed, extension_updated, popup_opened, export_json, export_png, and export_failed.
• Event parameters: the extension version number, and for export events the source domain (e.g. character.ai vs beta.character.ai) and, on failure, a short error category such as api_error or extraction_error.
• A randomly generated client identifier — a UUID stored locally in your browser via chrome.storage.local. This lets us count unique installs without identifying you personally. It is not linked to any account, email, or device fingerprint.
• Coarse technical metadata automatically attached by Google Analytics: approximate country (derived from IP address, which Google itself truncates before storage), browser language, and timestamp.

What is NOT collected

• Character names, descriptions, definitions, greetings, or any content of the characters you export.
• Your Character.AI account credentials, authorization token, cookies, or session data.
• The URLs of the pages you visit on Character.AI.
• Your full IP address (Google truncates the last octet before storage), email, real-world identity, or any other personal identifier.

How to opt out

You can disable analytics at any time by opening the extension popup (click the extension icon in your browser toolbar) and toggling off the "Help improve this extension (anonymous usage data)" switch. Once disabled, the extension will not send any analytics events until you re-enable it. Uninstalling the extension also stops all data collection.

Data retention

Analytics data is retained by Google Analytics for the default retention period (14 months) and is then automatically deleted.

7. Children

The extension is not directed at children under 13. Character.AI’s own terms restrict use accordingly.

8. Changes to this policy

If the extension changes what data it reads or where it sends data, this document will be updated and a new “Last updated” date set. Material changes will be noted in the Chrome Web Store listing changelog.

9. Contact

For questions about this policy or the extension’s behavior, open an issue on the project’s source repository (linked from the Chrome Web Store listing).