Privacy Policy

1.1 Account Information

When you create an account or sign in through the Extension, we collect:

• Email address — used for authentication and account identification
• Password — transmitted securely to our authentication endpoint; never stored in plaintext

1.2 Data You Save

When you use the Extension to save content to your ReelDeck Studio library, we collect:

• Page URLs and titles of tabs you explicitly choose to save
• Article content (HTML and text) when you use the article capture feature
• AI response content when you save responses from supported AI services (e.g., Claude, Google AI Overviews)
• Creator narration transcripts when you use Web App dictation to transcribe microphone commentary into editable script text

This data is collected when you invoke Quick Capture, article capture, or AI capture, or when you have explicitly enabled the optional browser copy auto-capture feature. Auto-capture requires optional site access, acts only on text you copy in browser pages, and can be paused or disabled. The Extension cannot see copies from native apps outside the browser and does not maintain a history of pages you merely visit.

1.3 Limited Extension Usage Information

When you are signed in, the Extension sends limited first-party workflow events to ReelDeck Studio servers. These events may include:

• whether a capture was started, completed, or failed;
• the ReelDeck interface surface and capture type;
• whether optional auto-capture was used and the broad source context, such as ai-chat or web-page;
• the selected ReelDeck collection identifier, when present; and
• a capture failure reason used to diagnose reliability.

ReelDeck associates these events with your authenticated account and an event time. Analytics metadata does not include the saved URL, page title, selected text, article content, AI answer, Creator Script text, or password. The Extension does not send events to third-party analytics or advertising services.

1.4 Data Stored Locally on Your Device

The Extension stores the following data locally in your browser using Chrome's built-in storage:

• Authentication token — to keep you signed in between sessions
• User profile (user ID, email, account creation date) — for local display in the Extension interface
• API configuration — the server address used to communicate with the Service
• Active collection — your currently selected library collection
• Recent saves — a short list of your most recent saves for quick reference
• Session credentials — your email and password during an active login attempt, stored temporarily in session storage and cleared when the browser restarts (where supported by the browser)
• Web app authentication cookie — read locally for single sign-on between the Extension and the Web App; not transmitted to third parties

1.5 Information We Do Not Collect

• We do not passively collect a browsing history or record pages you merely visit
• We do not collect page content unless you invoke a capture or optional browser copy auto-capture acts on text you copy
• We do not send Extension data to third-party analytics services or use tracking pixels in the Extension
• We do not collect device identifiers, IP-based location data, or fingerprinting data through the Extension
• We do not store microphone audio. When you use Web App dictation, microphone audio streams directly from your browser to the transcription provider and local media references are cleared after transcription.

3.1 Local Storage

Data stored locally on your device resides in Chrome's extension storage (chrome.storage.local and chrome.storage.session), which is encrypted at rest by Chrome and isolated from other extensions and websites.

3.2 Server-Side Storage

Content you save through the Extension is transmitted to and stored on our servers at api.reeldeckstudio.com. Your account data and saved content are stored in secure, access-controlled databases.

3.3 Data in Transit

All data transmitted between the Extension and our servers is encrypted using HTTPS (TLS). No data is ever sent over unencrypted connections.

When you use Web App dictation, ReelDeck mints a short-lived transcription credential and your browser streams microphone audio directly to the transcription provider. ReelDeck servers do not receive, buffer, or store that audio.

3.4 Credential Handling

• Login credentials are transmitted securely over HTTPS and are never stored in plaintext on our servers.
• Temporary credential storage during login uses Chrome's session storage, which is automatically cleared when the browser is closed.
• Authentication tokens are industry-standard JSON Web Tokens (JWT) with expiration controls.
• Optional personal OpenAI API keys are encrypted before server-side storage, used only to mint short-lived transcription credentials, and never returned to your browser after saving.

7.1 Access and Deletion

• You can view all data stored in your account through the ReelDeck Studio Web App.
• You can delete individual saved items from your library at any time.
• You can request complete deletion of your account and all associated data by contacting us at support@reeldeckstudio.com. Account deletion is permanent and removes your account data and saved content. First-party usage events may remain without the account identifier, as described in Section 6.

7.2 Local Data

You can clear all locally stored Extension data by signing out within the Extension, uninstalling the Extension, or clearing your browser data for the Extension.

7.3 Uninstall

Uninstalling the Extension removes all locally stored Extension data from your device. Server-side data associated with your account is not affected by uninstalling the Extension. To delete server-side data, see Section 6.1.