Privacy Policy

Last Updated: March 10, 2026

GNMSherlock ("we," "us," or "the Extension") is committed to protecting your privacy. This Privacy Policy explains our practices regarding data collection, use, and disclosure for the GNMSherlock Chrome Extension.

1. Data Collection and Usage

GNMSherlock is designed to be a "serverless" extension. This means we do not operate our own backend servers to collect or store your data.

1.1 Authentication Information (API Keys)

If you choose to use the optional AI-powered discovery features, you may provide your own API keys for services such as OpenAI, Google Gemini, or Anthropic Claude.

  • Storage: These keys are stored locally on your device using chrome.storage.local.
  • Usage: These keys are used solely to authenticate direct requests from your browser to the respective AI provider. We never see or have access to these keys.

1.2 Website Content

To perform sitemap discovery, the extension reads the public content of the websites you choose to scan (such as robots.txt and HTML structure).

  • Processing: If AI discovery is enabled, small excerpts of the page text are sent to the AI provider you have configured.
  • Storage: Discovery results and logs are stored in your browser's session storage and are cleared when the session ends or the extension is reset.

2. Third-Party Services

When you enable AI discovery, data is sent directly to the third-party provider of your choice:

  • OpenAI: Subject to OpenAI Privacy Policy
  • Google Gemini: Subject to Google Privacy Policy
  • Anthropic: Subject to Anthropic Privacy Policy

We do not use any third-party analytics (like Google Analytics) or tracking pixels within the extension.

3. Data Retention

  • Settings: Your API keys and settings remain in your local Chrome profile until you delete them or uninstall the extension.
  • Scan Data: Discovered sitemap URLs and logs are stored in temporary session memory and are not persistent across browser restarts.

4. Your Choices

You can use GNMSherlock without providing any personal information or API keys. Using the "Smart" inference engine (non-AI) does not send any page content to third-party AI services.

5. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected by updating the "Last Updated" date at the top of this page.

6. Contact Us

If you have any questions about this Privacy Policy, please contact us via the support link on the Chrome Web Store.