Nothing leaves your browser until you click Analyze. Detection runs entirely locally; a detected page produces metadata only (document type, title, detection signals) inside your browser. When you click Analyze, the extension sends the page's text as rendered in your browser, plus its URL, title, document type, and any personal context you saved in settings, to the analysis service.
Nothing is retained after responding. The page text, its URL, and the generated analysis are used to produce your answer and are not stored, not logged, and not used for anything else.
The only records kept are usage records, and they contain exactly three things: your key's id, a timestamp, and token counts for the request. No page content, no URLs, no analysis output.
Signing up stores your email address and a hash of your API key. Your key is shown to you once and cannot be read back — not even by us. You can regenerate it at any time, which immediately revokes the old one.
If you point the extension at your own server, your page text never transits the hosted service at all.