Last updated: October 2026. Sely collects the minimum data required to function. There is no analytics, no telemetry, no conversation history, and no sale of data.
| Data | Where | Why |
|---|---|---|
| Google account email + avatar | chrome.storage.local (your device) | Show sign-in state |
| Google ID token | chrome.storage.local (your device) | Authenticate free-tier requests to our proxy |
| Settings (actions, preferences) | chrome.storage.sync + cloud DB keyed by email | Sync across your devices |
| BYOK API key | chrome.storage.local only (never synced in plain text); encrypted blob in cloud DB | Your key, your providers |
Free-tier requests go through our Cloudflare Worker, which verifies your Google ID token (via Google's public JWKS — no sessions stored), forwards your selected text and prompt to the AI provider, and counts the request against your 5-hour and weekly free limits. Standard Worker invocation logs are kept for abuse prevention. Provider keys live only in Worker secrets.
BYOK requests go directly from the extension to your configured provider — they never touch our servers.
| Permission | Why |
|---|---|
identity | Google sign-in for free-tier auth |
storage | Settings, auth state, BYOK key |
activeTab, content scripts on all URLs | Selection detection and the action bar on any page |
Sign out and uninstall to remove local data. Contact us through the support link on the Chrome Web Store listing to delete cloud-synced settings.