Skip to content
AI Character Skin
Join the open beta

Privacy Policy

Effective date: August 24, 2026

This Privacy Policy explains how AI Character Skin (“we,” “us”) collects, uses, and shares information when you use our website, Chrome extension, and related services (the “Services”). It should be read with our Terms of Service.

We make money by offering paid access to the product, not by selling your chat transcripts or selling your personal information. We are not ChatGPT, Claude, or Gemini. Those Host Platforms have their own privacy policies for what happens after a message leaves your browser.

1. Who is responsible

The operator of AI Character Skin is the controller of personal information we process to run the Services. For privacy requests, email privacy@aicharacterskin.com.

2. Information we collect

Account and profile

When you sign in with Google, we receive the information you authorize Google to share, typically a unique Google user id, email address, and display name. We store a profile on our systems (currently hosted with Supabase) so you can use the library, favorites, and Active Character roster.

Product settings

We store which Characters you favorite and which you mark Active, and which Active Character is currently applied. The extension syncs that roster so the in-page picker can show your skins.

Session for the extension

After you sign in on our site, we hand a session token to the extension through a same-window message on our own origin so the extension can load your library. Tokens live in the extension’s local browser storage. You can disconnect the extension from Account.

Local extension data

On your device, the extension may keep a small map of Host Platform conversation identifiers to the last Character used in that chat. That exists so we do not re-inject the same skin instructions on every message in the same thread. It is stored in Chrome local storage, not as a full copy of your conversation on our servers.

What we do not try to collect

  • We do not operate a feature that uploads your full ChatGPT, Claude, or Gemini transcripts to AI Character Skin servers as a product database of your chats.
  • We do not ask for payment card numbers to be typed into our own forms; a processor does.
  • We do not require your Host Platform passwords. You stay signed in to those sites yourself.

Technical and usage data

Like most websites, our hosts and the extension may process IP address, browser type, device type, timestamps, pages viewed, and error logs. If PostHog (or a similar analytics tool) is configured, we may record product events such as page views and whether you activated a Character, using identified profiles only after you have an account. Analytics keys can be left unset, in which case those events are not sent.

Support and communications

If you email us, we keep the contents of that correspondence as needed to respond.

Payments

If you buy a paid plan, our payment processor collects billing details. We may keep records of what you bought, when, and whether the trial or license is active — not your full card number.

3. Information that goes to Host Platforms

This is the most important privacy point for an extension like ours. When a Character is equipped, the extension inserts personality instructions into the message path on ChatGPT, Claude, or Gemini. Those instructions — and whatever you type — are received by that Host Platform as part of your use of their product.

Host Platforms may store, review, or use that material under their own privacy policies, including for safety and, depending on your settings with them, model improvement. We do not control that. Review:

4. How we use information

  • Create and secure your account, and sign you in with Google.
  • Provide the library, favorites, Active roster, and extension picker.
  • Inject the Character you chose into Host Platform messages you send while a skin is on.
  • Improve reliability, debug the extension, and understand feature use (if analytics is on).
  • Process purchases, prevent abuse, and comply with law.
  • Send service notices (for example, material changes to this policy).

We do not sell your personal information, and we do not use your Host Platform transcripts as an AI Character Skin advertising profile. We do not use your chats to train an AI Character Skin foundation model because we are not storing those chats as training corpora.

5. When we share information

We share information with:

  • Service providers who host the app and database (including Supabase), authenticate you (Google), measure product use (PostHog, if enabled), and process payments (for example Stripe, if enabled).
  • Host Platforms, as described above, when you send a message with a Character equipped.
  • Authorities or counterparties when we believe disclosure is required by law, to protect rights and safety, or in a merger or sale of the business (with notice where required).

Chrome Web Store listing: we do not sell user data to third parties, and we do not use data received through the extension for purposes unrelated to the extension’s core functionality (equipping Characters on supported Host Platforms and syncing your AI Character Skin account).

6. Cookies, local storage, and similar technologies

Our website uses cookies and similar storage for sign-in sessions and preferences (including theme). The extension uses Chrome storage for session and conversation-memory keys. Analytics, if enabled, may use cookies or local storage as described by that provider. You can clear site data in your browser and remove the extension at any time. Blocking cookies may prevent sign-in from working.

7. Retention

We keep account and roster data while your account is open. If you ask us to delete the account, we will delete or de-identify personal information we control, except what we must keep for legal, security, or accounting reasons. Local extension data is removed when you uninstall the extension or clear extension storage. Host Platforms retain data on their own schedules.

8. Security

We use HTTPS, access-controlled databases, and origin-checked messaging between the website and the extension. No method of transmission or storage is perfectly secure. Protect your Google account. Do not use the Services to paste secrets you cannot afford to send to a Host Platform.

9. Children

The Services are not directed to children under 13 (or under 16 in the EEA/UK). We do not knowingly collect personal information from children below those ages. If you believe we have, contact us and we will delete it.

10. Your rights and choices

Depending on where you live, you may have the right to:

  • Access, correct, or delete personal information we hold.
  • Export a copy of certain account data.
  • Object to or restrict certain processing, or withdraw consent where processing is consent-based.
  • Opt out of “sale” or “sharing” for cross-context advertising — we do not sell personal information as that term is commonly used, and we do not run third-party ad networks on Host Platform pages via this extension.
  • Lodge a complaint with a data protection authority.

To exercise these rights, email privacy@aicharacterskin.com from the address on your account. We may need to verify you. You can also disconnect the extension, uninstall it, and use Google’s account tools to revoke third-party access.

California and other U.S. state laws: we collect identifiers (such as email and Google id), commercial information if you purchase, internet activity (site and extension usage), and inferences limited to product settings (which Characters you use). We do not collect sensitive government IDs. We do not use or disclose sensitive personal information for inferring characteristics beyond running the product you asked for.

EEA/UK: we process account data to perform our contract with you, to pursue legitimate interests in running a secure product, and where required by law. You may contact your local supervisory authority.

11. International transfers

We may process information in the United States and other countries where our providers operate. If we transfer personal data out of the EEA/UK, we will use an appropriate safeguard such as Standard Contractual Clauses where required.

12. Changes

We may update this policy. The effective date above will change, and we will provide extra notice of material changes where required. Continued use after the update means the new policy applies to that use.

13. Contact

These addresses are valid and receive mail: