Add privacy policy for ChatGPT Diagram Renderer

This document outlines the privacy policy for the ChatGPT Diagram Renderer browser extension, detailing data processing, sharing, user responsibilities, and legal compliance.

Author: grayfallstown

privacy-policy

@@ -0,0 +1,151 @@
+# **Privacy Policy – ChatGPT Diagram Renderer Browser Extension**
+
+*Last updated: 17 November 2025*
+
+This browser extension (“Extension”) helps you render diagrams from text using the Kroki rendering service. This Privacy Policy explains what data is processed, how it is used, and what third parties are involved.
+
+If you do not agree with this policy, please do not use the Extension.
+
+---
+
+### 1. Data Controller
+
+The Extension is a client-side tool installed in your browser.
+There is no separate backend operated by the developer; all processing happens either:
+
+* locally in your browser, or
+* by sending diagram source text to the external service **kroki.io** for rendering.
+
+The developer does not run or control kroki.io.
+
+---
+
+### 2. Data Processed by the Extension
+
+The Extension processes the following data:
+
+1. **Diagram Source Text**
+
+   * When you use the Extension to render a diagram, the plain text you enter (such as PlantUML, Mermaid, Graphviz, etc.) is sent to **kroki.io** to generate an image.
+   * This text **may contain personal or sensitive information**, depending on what you write.
+   * The Extension does **not** automatically filter or anonymize your content.
+
+2. **Technical Data from Your Browser**
+
+   * Standard technical data such as your IP address, user agent, and request metadata may be transmitted to **kroki.io** as part of the HTTP request, as with any normal web request.
+   * This technical data is handled according to kroki.io’s own policies and server configuration, not by the Extension’s developer.
+
+3. **Local Storage / Settings**
+
+   * The Extension may store configuration, UI settings, or cached data **locally in your browser** (e.g., via `localStorage`, `sync storage`, or similar browser extension storage APIs).
+   * This data is **not** sent to the developer and is **not** shared with third parties, except when it is included in a diagram request that you actively render.
+
+---
+
+### 3. Data Sharing with kroki.io
+
+To render diagrams, the Extension sends your diagram source text to the external service:
+
+> **Service:** kroki.io
+> **Purpose:** Generating diagram images from text
+
+* Your diagram text is included in the request sent to kroki.io.
+* kroki.io receives this text and the usual technical request data (e.g., IP address).
+* The developer of this Extension does **not** control kroki.io and has no insight into how they store or log data.
+
+You should assume that:
+
+* kroki.io **may log** requests for operational, debugging, or security purposes.
+* kroki.io’s processing of your data is governed by its **own** terms of service and privacy policy.
+
+If you cannot accept your diagram content being sent to an external service, you must not use the rendering functionality of this Extension.
+
+---
+
+### 4. No Analytics, No Advertising, No User Accounts
+
+The Extension:
+
+* does **not** include third-party analytics (e.g. Google Analytics),
+* does **not** show ads,
+* does **not** create or manage user accounts,
+* does **not** send any usage statistics or telemetry to the developer.
+
+All data processing is limited to what is necessary to provide diagram rendering functionality.
+
+---
+
+### 5. Your Responsibility for the Content You Send
+
+You are solely responsible for the content you enter into the Extension, including any personal or confidential information.
+
+Before sending diagram text to kroki.io via the Extension, you should:
+
+* avoid including **sensitive personal data** (e.g. health data, passwords, financial data),
+* anonymize or pseudonymize data where possible,
+* review whether sending this information to an external service is permissible under your local laws or organizational policies.
+
+---
+
+### 6. Legal Basis (where applicable)
+
+Where privacy laws apply (such as GDPR in the EU), the processing of your data via this Extension is generally based on:
+
+* **Your consent and explicit action** – you choose to input diagram text and trigger rendering, which sends data to kroki.io.
+* **Legitimate interest** – providing the functionality of rendering diagrams as requested by you.
+
+---
+
+### 7. Data Retention
+
+The Extension itself:
+
+* does **not** store your diagram content on any server operated by the developer.
+* only stores local settings and data in your browser, which you can clear at any time by removing or resetting the Extension or clearing your browser data.
+
+Any storage or logging on **kroki.io** is outside the developer’s control and governed by kroki.io’s own policies.
+
+---
+
+### 8. Security
+
+* The Extension relies on your browser’s security model.
+* Requests to kroki.io are typically sent over **HTTPS** (if supported by the service), in order to protect data in transit against simple interception.
+* However, no method of transmission over the Internet is 100% secure, and the developer cannot guarantee the security of data once it leaves your device and is sent to kroki.io.
+
+---
+
+### 9. Third-Party Services
+
+The main third-party service involved is:
+
+* **kroki.io** – for diagram rendering.
+
+You should review the terms, documentation, or privacy information provided by kroki.io directly to understand how they handle logs, data retention, and security.
+
+---
+
+### 10. Children’s Privacy
+
+The Extension is not designed for, or targeted at, children under the age of 16.
+If you are under the age applicable in your jurisdiction, you should only use this Extension with the consent of a parent or legal guardian.
+
+---
+
+### 11. Changes to This Privacy Policy
+
+This Privacy Policy may be updated from time to time, for example to reflect:
+
+* changes in functionality,
+* changes in third-party services (such as kroki.io),
+* changes in legal requirements.
+
+The “Last updated” date at the top will indicate the most recent revision. Continued use of the Extension after changes are published means you accept the updated policy.
+
+---
+
+### 12. Contact
+
+If you have questions or requests regarding this Privacy Policy, you can contact the developer of the Extension via the contact information provided in the extension store listing or project repository or via [email protected].
+
+---