Settings, custom API credentials, prompt history, image thumbnails, counters, and quota cache are stored through Chrome extension storage.
Product-Specific Privacy Policy
PromptSketch AI
This notice explains how PromptSketch AI processes reference images, page context, generated prompts, local history, custom vision API credentials, exports, product-service requests, and limited operational events. It supplements the general ReForge Extensions privacy policy.
On-device AI stays in Chrome. Cloud Assist receives visual measurements and page clues, not the original image. A custom API receives the selected image.
The custom API key is stored locally and used only as an authorization header for the endpoint you configure.
Prominent disclosure for images, page context, and custom API keys
When you choose a custom vision API, PromptSketch AI sends the selected image, the configured model name, prompt instructions, and your API key directly to the OpenAI-compatible endpoint you entered. ReForge does not receive your custom API key through this custom-API request. The provider operating your chosen endpoint may process and retain the request under its own terms.
When you use Cloud Assist, the extension does not send the original image. It sends extension-side measurements such as dimensions, aspect ratio, palette, brightness, contrast, saturation, color temperature, visual complexity, center emphasis, and symmetry. It can also send available image alt text, file name, nearby page text, page title, and page URL so the service can produce a more useful prompt.
When supported on-device AI is used, image processing occurs through Chrome's local AI capability. The image, alt text, and page title used for that analysis are not sent to ReForge by the on-device request.
Chrome Web Store Limited Use statement
PromptSketch AI uses user data only to provide, maintain, secure, troubleshoot, and improve the image-to-prompt features the user requests. We do not sell user data. We do not use or transfer user data for personalized advertising, retargeting, interest-based advertising, data brokerage, credit-worthiness, lending, or unrelated profiling.
1. Scope and controller
This policy applies specifically to the PromptSketch AI Chrome extension, including its popup, in-page panel, context-menu actions, image shortcuts, options page, onboarding page, background service worker, AI modes, custom API configuration, local history, exports, Reviews flow, and related support requests.
ReForge Extensions controls the extension's first-party data practices. Privacy and support requests can be sent to [email protected]. The general policy at /privacy.html also applies unless this product-specific notice is more specific.
2. Data the extension processes
| Category | Examples | Source and use | Storage or transmission |
|---|---|---|---|
| Selected reference images | Web images, page captures, pasted images, and local JPG, PNG, WebP, or GIF files | Used only after you choose an image or trigger an image analysis action | Processed in browser memory; a thumbnail can be stored in local history. Transmission depends on the AI mode described below. |
| Image measurements | Dimensions, aspect ratio, dominant colors, brightness, contrast, saturation, temperature, edge density, center emphasis, and symmetry | Calculated locally from the selected image to support prompt generation | May be sent to ReForge Cloud Assist; stored as part of generated results only where included in the result structure. |
| Page and image context | Image URL, page URL, page title, image alt text, nearby page text, file name, and source type | Used to locate the selected image, label history, improve Cloud Assist context, and preserve source links | History source details are stored locally. Available alt text, file name, nearby text, page title, and page URL may be sent to Cloud Assist. |
| Generated and edited prompt data | English, Simplified Chinese, or Japanese prompts; analyses; style tags; recreation prompt; prompt core; negative prompt; structured JSON; user edits | Created by the selected AI mode and editable by you | Stored locally when added to history. Prompt content is not included in operational analytics. |
| Custom API configuration | Base URL, API key, model name, and connection-test status | Entered by you to use an OpenAI-compatible vision endpoint | Stored in chrome.storage.local. The key is sent only to your configured endpoint as a bearer authorization value. |
| Settings | Interface language, output languages, analysis mode, export folder, enabled state, and image-shortcut preference | Selected by you in the popup or settings page | Stored with chrome.storage.sync so Chrome may synchronize it when browser sync is enabled. |
| Local history and counters | Up to 30 history entries, thumbnails, source URLs, prompts, edits, success/copy/export counters, quota cache, panel state, and Review state | Generated while you use the extension | Stored in chrome.storage.local on the device. |
| Limited operational and product events | Install/update/lifecycle events, product ID, extension version, random installation identifier, browser/OS/language context, action labels, AI success/failure or quota metadata, Reviews shown/rated/dismissed, and explicit download/settings clicks | Generated by the ReForge product SDK and the extension's explicit event calls | Sent to ReForge-controlled services and Alibaba Cloud / Aliyun Simple Log Service for operation, reliability, quota, troubleshooting, security, and product improvement. |
| Voluntary low-rating feedback | Selected rating and the improvement reason you type, limited by the extension to 500 characters | Sent only when you submit the 1–3 star feedback form | Transmitted with the Review event; the typed reason is not stored in the extension's local Review state. |
| Support and website request data | Email address, message, attachments, IP address, user agent, requested URL, referrer, timestamp, and security event data | Collected only when you contact support or visit the website | Processed by email providers and website infrastructure such as Cloudflare. |
3. How each AI mode handles an image
When Chrome and the device support image-capable local AI, the selected image is processed through Chrome's on-device capability. The on-device request does not send the image to ReForge.
The extension extracts visual facts locally and sends those facts plus available page clues to ReForge Cloud Assist. The original image bytes are not included in this request.
The selected image, model name, prompt instructions, and locally stored API key are sent directly to the endpoint you configured. That provider controls its own processing and retention.
Custom API connection test
When you click the connection test, the extension sends a generated one-pixel test image and a one-language prompt request to the endpoint you configured. This verifies endpoint compatibility without using one of your saved reference images.
4. Chrome permissions and host access
| Permission | Why it is required | Privacy boundary |
|---|---|---|
activeTab |
Analyze the current page's main image and capture the visible tab after a user action | Used for the active tab involved in the requested action, not for background browsing-history collection. |
clipboardWrite |
Copy a prompt or selected image after you click Copy | The extension does not request clipboard-read permission. |
contextMenus |
Add an image/page right-click command | Processes the image URL or current page only when you select that command. |
downloads |
Download the selected image and user-requested JSON or Excel exports | Creates files only after an explicit download or export action. |
scripting |
Recover the in-page panel on an already-open tab when its content script is not yet connected | Dynamic injection follows an explicit popup or context-menu action. |
storage |
Save settings, secrets, history, counters, quota cache, panel state, SDK installation state, and Review state | Non-secret settings use sync storage; custom API credentials and content history use local storage. |
tabs |
Find the active tab, check whether the page can receive the panel, and open user-selected onboarding or support links | The extension does not build or sell a cross-site browsing profile. |
<all_urls> |
Show the panel and image shortcut on ordinary HTTP/HTTPS sites and retrieve the image you select | The main script excludes Google account/OAuth, Stripe payment, and ReForge API pages. It does not crawl sites in the background. |
https://api.reforgeextensions.com/* |
Load product configuration, enforce Cloud Assist quota, make Cloud Assist requests, support Reviews/product state, and handle a payment-success bridge if enabled | Custom API keys and original image bytes are not sent to this host by custom-API or Cloud Assist requests. |
PromptSketch AI does not request Chrome API permissions for cookies, browsing history, bookmarks, clipboard reading, or password access. Although its content script can run on ordinary web pages, it is not designed to collect browser form submissions or general page bodies.
5. Local storage, history, and exports
- Sync storage: non-secret settings such as language, output-language selection, mode, download folder, enabled state, and image shortcut preference.
- Local storage: custom API Base URL/key/model, up to 30 history entries, image thumbnails, prompt results and edits, usage counters, quota cache, panel state, SDK installation state, and Review state.
- JSON exports: can contain the result or complete local history you explicitly export.
- Excel exports: can contain embedded reference-image previews, prompts, style tags, structured data, page URLs, and original-image URLs.
- Image downloads: save the image you selected under Chrome Downloads and the subfolder you configured.
- Exported files remain under your control and are not uploaded to ReForge by the export action.
6. Network destinations and third-party processors
ReForge product and Cloud Assist service
api.reforgeextensions.com provides product configuration, Cloud Assist, quota enforcement,
product/account state, Reviews support, and a payment-success bridge that may be used if product configuration
enables those capabilities. Cloud Assist receives visual facts and page clues described above, not original image bytes.
Alibaba Cloud / Aliyun Simple Log Service
The ReForge product SDK can send limited operational events to an Aliyun SLS endpoint for lifecycle monitoring, reliability, security, troubleshooting, quota/product operation, and product improvement. Operational analytics are designed not to include the selected image, generated prompt body, page body, clipboard content, or custom API key.
Your custom API provider
When you choose custom API mode, the extension connects directly to the Base URL you supplied. The provider receives your API key, selected image, model name, and prompt instructions. Its privacy, security, billing, and retention terms are controlled by that provider, not ReForge.
Source image hosts
To retrieve a selected public web image, the background service worker can request that image URL with browser credentials omitted and without a referrer. The image host still receives normal network information such as an IP address and request metadata.
Google Chrome and Chrome Sync
Chrome supplies extension APIs, local browser storage, optional account sync for syncable settings, download handling, and supported on-device AI. Google's processing is governed by its own terms.
Website and support providers
Cloudflare or similar infrastructure can process standard website request and security metadata. Email routing and mailbox providers process information you choose to send to support.
7. Retention
- Local and sync extension data remains until you delete individual history entries, clear history, change settings, clear extension storage, disable applicable Chrome sync data, or uninstall the extension, subject to Chrome's storage behavior.
- Prompt history is limited by the extension to the 30 most recent entries.
- Temporary image data used during an analysis remains in browser memory for the action or current UI session unless a thumbnail/result is saved to local history.
- ReForge and Aliyun operational records are retained only as long as reasonably necessary for service operation, quota enforcement, reliability, troubleshooting, security, abuse investigation, legal compliance, and aggregated product improvement. This notice does not claim an exact period where the deployed service configuration has not established one.
- Custom API providers retain requests according to their own policies and account settings.
- Support correspondence may be retained while needed to answer the request, resolve a dispute or incident, or meet legal obligations.
8. Data sharing and sale
- We share data only with the processors and user-selected provider categories described in this policy, when needed to provide the requested feature, secure or operate the service, respond to support, or comply with law.
- We do not sell, rent, trade, or license PromptSketch AI user data to data brokers, advertisers, or ad networks.
- We do not use selected images, prompt text, page content, API keys, or local history for personalized advertising.
- We may disclose information when legally required or reasonably necessary to protect users, rights, service integrity, or public safety.
9. Security
- Remote ReForge and normal remote custom API connections are expected to use HTTPS/TLS. Local development endpoints may use localhost HTTP where Chrome permits it.
- Custom API credentials are separated from sync settings and stored in local extension storage rather than Chrome sync.
- Sensitive Google account/OAuth and Stripe payment pages are excluded from the main PromptSketch content script.
- No storage or transmission method can guarantee absolute security. Protect access to your Chrome profile and use a narrowly scoped API key when your provider supports one.
10. Your controls
- Choose the AI mode and generated prompt languages in settings.
- Use on-device processing where Chrome reports that it is supported.
- Do not configure a custom API if you do not want a third-party provider to receive selected images.
- Replace or remove your custom API key in settings at any time, and revoke it with the provider if needed.
- Delete individual history items, clear all history, clear extension storage, disable the extension, or uninstall it.
- Export your local history before deleting it if you want a personal backup.
- Disable in-image Prompt shortcuts or the extension itself from its settings.
- Contact [email protected] for access, correction, deletion, objection, or other privacy requests relating to first-party service data.
11. Children
PromptSketch AI is a general creative productivity tool and is not directed to children under 13. We do not knowingly use the extension to collect children's personal information. If you believe a child has provided first-party service data, contact us so we can review and delete it where applicable.
12. Policy changes and contact
We may update this notice when PromptSketch AI's permissions, AI modes, providers, storage, or data practices change. The page will show a new “Last Updated” date. Material changes may also be communicated through the extension, Chrome Web Store listing, or website where appropriate.
ReForge Extensions
Email: [email protected]
Product page: https://reforgeextensions.com/extension/promptsketch-ai
Static privacy URL: https://reforgeextensions.com/privacy/promptsketch-ai/