Privacy Policy

Last updated: June 7, 2026

PostPolish is a browser extension that rewrites Bluesky post drafts when you ask it to. This policy describes exactly what data we handle. The short version: we see your draft only when you click Polish, we use it only to generate the rewrite, and we don't store it.

What we collect and why

• Draft text. When you click the Polish button, the text of your current draft is sent to our API, forwarded via OpenRouter to Google's Gemini model to generate the rewrite, and returned to you. On our servers drafts are processed in memory and are not stored, logged, or sold. We never read your screen, your timeline, or any text you haven't explicitly submitted by clicking Polish. (Note: the rewrite is generated by Google's Gemini via OpenRouter; your draft is processed under their API terms while the rewrite is created.)
• A random install identifier. Generated locally on install. Used solely to meter the free trial (10 polishes) and prevent abuse. It is not linked to your Bluesky account or identity.
• Your license key (paying subscribers). Used to verify your subscription with our payment provider and meter the fair-use cap.
• Usage counts. We keep a counter of how many polishes an install or license has used (a number — not the content).

What we do NOT collect

• No browsing history, no analytics trackers, no cookies on the extension.
• No Bluesky credentials — the extension never sees your password or session.
• No personal information beyond what's listed above. Payment details (name, email, card) are handled entirely by our merchant of record and never touch our servers.

Chrome Web Store — Limited Use disclosure

PostPolish's use of data received from Google APIs and the Chrome platform adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements. Draft text is used only to provide the user-facing rewrite feature you invoke, is never sold or used for advertising, and is not subject to human review except for abuse investigation or with your consent.

Third parties we rely on

• OpenRouter and Google (Gemini) — OpenRouter routes the request to Google's Gemini model, which generates the rewrite. Your draft is processed under their API terms.
• Cloudflare — hosts our API.
• Lemon Squeezy (merchant of record) — processes payments and issues license keys under their own privacy policy.

Data retention

Draft text: not retained. Usage counters and license records: retained while your subscription or trial is active and deleted within 90 days of cancellation or on request.

Your rights

Email us to access or delete any data associated with your license key or install ID. EU/UK users: processing is based on contract performance (providing the service you invoke); you have the usual GDPR rights of access, rectification, erasure, and complaint to a supervisory authority.

Changes

We'll update this page and the "last updated" date if anything changes. Material changes will be noted in the extension's release notes.

Contact

swarajban@gmail.com