Privacy Policy
The short version. PromptCraft builds your prompt entirely inside your browser. There is no account,
no analytics, no tracking, and no advertising. The only time any text leaves your device is when you personally
turn on Improve with AI and press that button — and even then, only the prompt text itself is sent.
1. Who this policy covers
This policy applies to the PromptCraft — AI Prompt Builder for Work Chrome extension (“PromptCraft”,
“the extension”), published on the Chrome Web Store by Tarek Riman (“we”, “us”). Contact:
tarekriman@gmail.com.
2. Single purpose
PromptCraft has one purpose: to help a person compose a well-structured text prompt for an AI assistant.
Every permission it requests and every piece of data it touches exists to serve that purpose and nothing else.
3. What PromptCraft stores, and where
The following is saved using the browser’s chrome.storage.local API. It stays on your computer.
It is not uploaded to us, it is not synced to any server we control, and we cannot read it.
| Data | Why | Where it lives |
|---|---|---|
| Selected role, company size, tone, format, length, and fine-tune toggles | So the extension reopens the way you left it | Your browser only |
| The text you type into “What do you need?” and “Who is it for?” | So a half-written prompt is not lost if you click away | Your browser only |
| Prompts you copy, improve, or favourite (“Saved” tab) | So you can reuse them | Your browser only |
| Whether you turned on “Improve with AI” | So we do not ask you again | Your browser only |
You can delete all of it at any moment: open PromptCraft, click the gear icon, and choose
Erase everything. Removing the extension from Chrome also deletes it.
4. The one feature that sends data off your device
Improve with AI is off by default. Before it can run even once, PromptCraft shows you a disclosure
screen and you must explicitly turn it on.
What is sent
- Only the prompt text visible in the preview pane at the moment you press the button.
- Nothing else. Not your saved prompts, not your browsing history, not your IP-derived profile, not any
identifier — PromptCraft attaches no user ID, cookie, or device fingerprint to the request.
Where it is sent
Over HTTPS to https://tire-compare.com/api/aeo-proxy.php, a relay endpoint operated by the
developer of PromptCraft. That endpoint holds the AI provider’s API key server-side so it never has to be
shipped inside the extension, and forwards your prompt text to OpenAI for rewriting. The rewritten text
comes straight back to your browser.
The domain tire-compare.com is an existing property owned by the same developer and is used
purely as the hosting location for this relay. It performs no other function for PromptCraft.
How long it is kept
The relay processes your prompt in memory to produce a response and does not write prompt text to a
persistent store. OpenAI’s handling of API data is governed by their own terms; as of this policy’s effective
date, OpenAI states that data submitted through the API is not used to train their models. See
OpenAI’s privacy policy.
Turning it off
Open PromptCraft, click the gear icon, and set Improve with AI to off. PromptCraft will also release
the host permission for the relay domain. Every other feature keeps working with no network access at all.
Please do not paste secrets. Treat the “Improve with AI” button the way you would treat pasting into
any online AI tool. Do not include passwords, financial account numbers, health records, or information your
employer classifies as confidential.
5. Opening ChatGPT or Claude
The Open in ChatGPT and Open in Claude buttons simply open a new browser tab with your prompt
in the URL. This is the same as you typing it there yourself. Once that tab opens, you are on that company’s
service and their privacy policy applies. PromptCraft is not affiliated with, endorsed by, or sponsored by
OpenAI, Anthropic, or Google.
6. What PromptCraft never does
- No user accounts, sign-ins, or email collection.
- No analytics, telemetry, crash reporting, or usage metrics of any kind.
- No cookies, advertising identifiers, or cross-site tracking.
- No selling, renting, or sharing of data with data brokers, advertisers, or any third party.
- No reading of the pages you visit. PromptCraft has no content scripts and requests no access to your tabs
or browsing history. It only sees what you type into its own popup. - No creditworthiness or lending assessment.
7. Permissions, in plain English
| Permission | What it is for |
|---|---|
storage |
Save your role, preferences, and saved prompts locally so the extension remembers your setup. |
https://tire-compare.com/* (optional) |
Requested only if you turn on “Improve with AI”, so the extension can reach the relay endpoint. Not granted at install time. Released when you turn the feature off. |
8. Limited Use disclosure
PromptCraft’s use of information received from Google APIs and from users adheres to the
Chrome Web Store User Data Policy,
including the Limited Use requirements. Specifically:
- Allowed use. Data is used only to provide and improve the single, user-facing purpose stated above.
- Allowed transfer. Prompt text is transferred only to the AI provider needed to fulfil an
“Improve with AI” request you initiated, or where required by law. It is never transferred for advertising,
credit assessment, or resale. - Prohibited advertising. We do not use or transfer data for serving personalised, re-targeted, or
interest-based advertising. - Prohibited human interaction. No human reads your prompt text, except with your explicit consent,
where necessary for security purposes or to comply with applicable law.
9. Security
All network traffic uses HTTPS. The extension ships no remotely hosted code: every script it runs is bundled
in the package and reviewed by Google. Its Content Security Policy blocks inline and third-party scripts.
10. Children
PromptCraft is a workplace productivity tool intended for people aged 16 and over. It is not directed at
children and we do not knowingly collect any information from them.
11. Your rights
Because PromptCraft holds no data about you on any server, there is no account to access, export, or delete.
All of your data is under your direct control in your own browser and can be erased instantly from Settings.
If you have a question about your rights under the GDPR, UK GDPR, CCPA/CPRA, PIPEDA, or a similar law, email
tarekriman@gmail.com and we will respond within 30 days.
12. Changes to this policy
If we change how PromptCraft handles data, we will update this page, change the “Last updated” date, and —
where the change is material — surface a new in-extension disclosure and ask for your consent again before the
new behaviour takes effect.
13. Contact
Tarek Riman · tarekriman@gmail.com