Privacy Policy
Last updated: October 31, 2026
This policy explains what the NightZip AI browser extension and its membership service (nightzipai.lxin54682.workers.dev) collect, why, and what we do with it. We collect only what is needed to run AI chat, Patreon sign-in and monthly quotas. We do not sell data, show ads, or use analytics or tracking.
Data stored only in your browser
- Settings, prompts, appearance, window position, language and shortcut preferences are saved in your browser's extension storage. If you use your own API key, the key and its base URL are stored there too; when browser sync is on, your browser may sync these settings to your browser account.
- This data stays on your device (or your browser's sync service) and is not sent to our server.
Text you send to the AI
- When you ask a question, the text you type, the text you selected, the prompt you chose and, only if you turn on page context, the readable text of the current page are sent to the AI model.
- With a NightZip AI membership, this text goes to our server, which forwards it to DeepSeek (api.deepseek.com) to generate the answer. Our server does not save message content; it records only the number of tokens used.
- With your own API key, requests go directly from your browser to the provider you configured and never pass through our server. That provider's privacy policy applies.
- The extension can read web pages because it shows its menu and window on any site, but it reads page content only when you use it.
Patreon sign-in and membership
- When you sign in with Patreon we receive, with your permission (scopes identity and identity.memberships): your Patreon user ID, your display name, and your membership with our campaign (patron status, entitled tier, last charge status, next charge date and free-trial flag). We do not receive your email address or payment details.
- We store: an internal account ID, your Patreon user ID, your display name, Patreon access and refresh tokens (encrypted with AES), your membership status and quota usage, and a session token kept only as a hash.
- This is used to sign you in, check whether your membership is active and enforce your token quota.
Security and abuse prevention
- To limit repeated sign-in attempts, your IP address is stored as a one-way hash for about 10 minutes.
- The service runs on Cloudflare Workers and Cloudflare D1. Cloudflare processes network requests and may keep standard operational logs. All traffic uses HTTPS.
Third parties
- Patreon (sign-in and membership), DeepSeek (AI answers for members), Cloudflare (hosting), and any AI provider you configure with your own key. Each handles data under its own privacy policy. We share nothing with anyone else.
Retention and your choices
- Signing out deletes your session on our server. Expired sign-in attempts and sessions are deleted automatically. Account, membership and usage records are kept while your account exists so quotas work correctly.
- You can disconnect NightZip AI in your Patreon settings at any time, remove the extension to delete its local data, or contact us to have your account and all associated records deleted.
Children
- NightZip AI is not directed at children under 13, and we do not knowingly collect their data.
Changes
- If this policy changes we will update this page and the date above. Significant changes will be noted in the extension's release notes.