Glossabet Page sends the page title, selected headings, existing labels and bounded page structure to a Cloudflare Worker and OpenAI when you allow cloud naming and manually request names. This text may contain private information, including personal details, health or financial information, visible login information, or text from personal communications. Review the page before naming it.
The capture rules exclude editable field values, textarea and contenteditable text, selected options, hidden content, raw HTML and screenshots. These rules also apply to indirect label reads. Ordinary visible text may still contain personal data. Iframes and application shadow trees are outside this version’s capture.
Chrome local storage holds generated names, your edits, hashed page/evidence keys, an installation UUID, consent and label preference. URLs, titles, evidence, selectors and snapshots are not persisted. Hashes and the UUID are pseudonymous, not anonymous.
The Worker holds the OpenAI API key. It uses GPT-5.4 nano with Responses application-state storage disabled. OpenAI’s standard abuse-monitoring retention may still apply, ordinarily up to 30 days. Provider policies and account-specific controls govern exceptions. The Worker uses the connecting IP transiently for a platform rate limiter; application code does not retain it or log page text. Platform operational records may still exist.
Our use and sharing of user data follows the Chrome Web Store User Data Policy, including its Limited Use requirements. We use this information only to provide and support Glossabet Page's naming features and protect the service from abuse. We do not sell user data, use it for advertising or unrelated purposes, or use it to determine creditworthiness or make lending decisions.
“Forget this page’s names” removes this page’s saved maps. “Clear saved data” removes names, edits, identifiers, consent and preferences, cancels pending work, and retains only a non-personal erasure counter and reset defaults. Deleting local data cannot delete provider operational records already created. Cancelling does not guarantee a provider request already accepted is unbilled.
Glossabet Page has no telemetry, accounts, sync or application database. Cloud naming uses https://glossabet-page.kserrec.workers.dev. The OpenAI API key stays on the server and is never included in the extension.