Overview
Tweeks by NextByte is a Chrome extension that lets you customize the web to work exactly how you want. This privacy policy explains how we collect, use, and protect your information.
Information We Collect
Page Content Data
- What: HTML structure, visible text, and DOM elements from web pages you're viewing when generating scripts
- When: Only when you explicitly click "Generate Script"
- Why: Required to understand page context for accurate script generation
- Scope: Limited to the active tab content at the time of generation
User Input Data
- What: Your natural language requests describing desired functionality
- When: When you submit generation requests through the extension popup
- Why: To process your request and generate appropriate userscript code
- Examples: "Change page to dark mode", "Add a filter panel by author", "Remove sidebar"
Generated Scripts
- What: JavaScript & CSS code generated by our service and any scripts you manually install
- Where Stored: Locally in your browser and on our servers
- Why: To manage and execute your scripts, enable generation history, and support sharing features
Generation History & Sharing Data
- What: Generated scripts, user requests, and optional customizations (titles, descriptions, images)
- Where Stored: Our secure database, associated with your account
- Why: To provide access to your generation history and enable you to share scripts with others
- Visibility: Private by default; public only when you explicitly choose to share via unique link
How We Use Your Information
Primary Processing
- Combine your natural language request with relevant page content
- Send this data to our script generation API for processing
- Return generated code to your browser
- Store generated scripts locally for future use
Script Sharing
- When you share a script, it becomes publicly accessible via a unique URL
- Shared scripts display your username (if set) or a masked email address
- You can create an optional public profile to showcase scripts
- You control what scripts are shared and can disable sharing at any time
We Do NOT:
- Track your browsing behavior across websites
- Share data with third parties except our API service
Generated Content Rights
User-Generated Scripts
When you use our script generation functionality:
- Generated Code: We retain rights to use, modify, distribute, and commercialize any scripts generated by our service
- Sharing Rights: Generated scripts may be used to improve our services, shared as examples, or incorporated into our script library
- No Warranty: Generated scripts are provided "as-is" without warranties of functionality or security
Your Rights
- You may use, modify, and distribute generated scripts for your personal purposes
- You are responsible for ensuring generated scripts comply with website terms of service and applicable laws
Data Sharing and Third Parties
External AI Services
- Purpose: Processes generation requests to create userscripts
- Data Shared: Page content, user requests, and technical metadata
- Retention: Data is processed in real-time by the AI service and not permanently stored by them
- Security: All communications use HTTPS encryption
No Other Third Parties
- We do not share your data with advertisers, analytics services, or other third parties
- We do not sell or monetize your personal information
Data Storage and Security
Local Storage
- Generated scripts are stored locally in your browser using Chrome's secure storage APIs
- Configuration settings remain on your device
- You can view, modify, or delete stored scripts through the extension interface
Server Storage
- Generated scripts and generation metadata are stored in our secure database
- Scripts remain private unless you explicitly share them via the sharing feature
- You can manage your generation history, shared scripts, and public profile through the web interface
- Server-stored data is retained to provide generation history and sharing functionality
Transmission Security
- All API communications use HTTPS/TLS encryption by default
- Custom headers (disabled by default) are transmitted securely but may contain sensitive data
Your Rights and Controls
Data Control
- View: Access locally stored scripts through the extension's "Library" and view your generation history on the web
- Modify: Enable/disable, edit or update any generated or installed scripts
- Delete: Remove individual scripts from your browser or request deletion of server-stored data via email
- Share: Control which scripts are public via unique share links and manage your public profile
Extension Permissions
- Active Tab: Required to capture page content for script generation
- Storage: Stores your scripts and preferences locally
- Scripting: Injects your approved scripts into web pages
- All URLs: Necessary for script execution on any website you choose
- UserScripts: Chrome API for registering and managing userscripts that run in the page context
- ClipboardWrite: Enables GM_setClipboard API for userscripts to copy data to clipboard
- Tabs: Required for GM_openInTab API and managing script execution across browser tabs
- Notifications: Supports GM_notification API for userscripts to display system notifications
- Offscreen: Creates background documents for secure API calls and clipboard operations
- Downloads: Enables GM_download API for userscripts to trigger file downloads
Opt-Out Options
- Disable the extension to stop all data processing
- Manually review generated scripts
Children's Privacy
This extension is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided personal information, please contact us to remove such information.
Changes to This Policy
We may update this privacy policy to reflect changes in our practices or legal requirements. Updated policies will be posted with a new effective date. Continued use of the extension after changes constitutes acceptance of the updated policy.
International Users
Our API service may process data in various locations. By using this extension, you consent to the processing of your data in these locations, which may have different data protection laws than your jurisdiction.