PromptDirector Privacy Policy

Local-first handling

PromptDirector is a Chrome extension for collecting, organizing, searching, backing up, and sharing personal creative references. It has no developer-operated data server or account system, does not collect analytics, does not show ads, and does not sell user data.

Cases, media, tags, Creative Skills, settings, and API keys are stored in local extension storage by default. Screenshot processing, document extraction, archive creation, and offline previews run locally.

Data handled

PromptDirector handles data only when the user explicitly captures, imports, exports, analyzes, generates, or composes with it. This can include:

• website text, images, videos, documents, download-resource links, screenshots, titles, author and source information that the user explicitly selects;
• prompts, tags, colour cards, Creative Skills, projects, notes, and settings the user creates or confirms;
• the AI service address, model, API key, sending authorization, and service capability information the user connects;
• material the user actively imports, exports, or shares, and locally generated preview files.

Web capture and local saving

• Page capture, screenshots, visual selection, and list collection run only after the user starts them, and do not bypass logins, CAPTCHAs, paywalls, access controls, or anti-automation restrictions.
• Body text and media are shown to the user for confirmation before saving; only content in the final save plan is written to a case.
• If reading public media fails, the extension may read user-confirmed media through the current page session the user has already authorized. It does not read, store, or export cookies, tokens, or authentication request headers.
• When the user saves a selected Douyin, YouTube or Bilibili video, an installed local video component may resolve its work URL, download from the original platform and merge audio and video. Only the selected work and media URLs are passed to it. It does not export browser cookies, login request headers or AI keys, or use paid parsing services. Temporary videos are removed after transfer, cancellation or connection closure; saved originals remain in the library.
• PDF, Markdown, SKILL.md, TXT, HTML, and RTF files are saved only after the user explicitly selects them and the real type and size checks pass. Archives, programs, and unknown files are not imported automatically.
• API keys never enter export packages, share packages, composition drafts, diagnostics, or logs.

Optional AI services

PromptDirector lets the user choose a third-party AI service or a custom compatible endpoint separately for text tags, Skill extraction, composition planning, image analysis, video analysis, image generation, and video generation.

• Installing the extension does not start any AI request. A real request requires the configured service, selected model, the necessary permission, and the user's sending authorization. Paid media analysis or generation also requires a separate confirmation for the current action.
• Only the content necessary for the current task, selected or submitted by the user, is sent. The extension does not automatically send the full library, unselected cases, or API keys.
• Text-only composition mode does not read, analyze, or send images.
• Content is sent directly over HTTPS to the service the user chose. The developer does not receive or proxy AI request content; third-party services handle data under their own terms and privacy policies.

Sharing, retention, and deletion

Data leaves extension storage only when the user explicitly sends it to a configured AI service, hands it to a paired local Agent, exports or migrates it, or creates and distributes a share package. Local data remains until the user edits or deletes it, clears extension storage, or uninstalls the extension. Users can create a local backup before uninstalling and remove saved API keys and sending authorization in settings.

When Agent connection is enabled, requested case content and originals are delivered to the paired local Agent. Its host may send them to configured models or services according to the user's instructions and its own settings; the host manages that subsequent processing. Disconnecting rejects new Agent requests; submitted tasks continue.

Chrome Web Store Limited Use

PromptDirector uses permissions and user data only to provide or improve its disclosed, user-facing purpose and features. User data is not sold or used for personalized, retargeted, or interest-based advertising. Humans are not allowed to read user data unless the user separately authorizes access to specific content for a support request, or access is required for security or legal obligations.

Permission purposes

• activeTab and scripting: access the current page only after a user starts capture, visual selection, or a screenshot action.
• webRequest: identify media response URLs and types on authorized websites for video counts and capture previews. Candidates stay in the browser session and are cleared on navigation or tab closure. This does not read credentials, modify requests, or upload browsing history; cross-origin media still requires site permission.
• alarms: schedule or resume local background work; never for tracking.
• contextMenus and sidePanel: provide user-triggered capture and the side-panel workspace.
• downloads and offscreen: save user-requested files and process screenshots, media, documents, or ZIP archives locally.
• storage and unlimitedStorage: retain selected references, media, settings, and local AI configuration.
• Fixed GitHub and GitHub Pages origins: read the official curated catalog, selected curated Release resources and video component installers. Local development builds also check official updates and download program updates after user confirmation.
• Optional downloads.open: requested when the user chooses to install the video component, so their explicit Open installer click can open the downloaded official installer. Downloaded files are not executed automatically.
• Optional nativeMessaging: requested when enabling Agent connection or installing the video component. A paired Agent can search cases, read selected originals, capture URLs and save materials as requested; this interface does not expose AI service keys. Local video extraction is independent of Agent connection and runs only when saving selected videos.
• Enabling Agent connection requests optional <all_urls> access so the paired Agent can capture user-requested URLs in a dedicated tab; browsing history is not recorded or uploaded.
• Optional <all_urls>, clipboardRead, and declarativeNetRequestWithHostAccess: used only after the user starts the corresponding feature and grants the required access.

Contact

Contact the maintainer through the PromptDirector support page.