Privacy policy

A personal project

Pilbot is a hobby project by Jakub Imrich. It isn’t a company product or a paid service, and it comes with no support or guarantees. It’s shared free of charge for anyone who wants to try it.

Pilbot’s source code is public on GitHub, so anyone can check what the extension does: github.com/jakubimr25/pilbot-extension.

How Pilbot works

Pilbot is a Chrome extension with no backend and no sign-in. You connect it to an AI provider of your choice with your own API key (“bring your own key”). When you use a feature, the extension sends the request straight from your browser to that provider, using the common OpenAI-compatible format.

It works with Groq (the default), OpenAI, OpenRouter, Google Gemini, Mistral, DeepSeek, local servers such as Ollama and LM Studio, and any other OpenAI-compatible endpoint.

To show its buttons, Pilbot runs on the pages you visit, but it sends nothing until you use one of its features.

What leaves your browser, and when

Only when you use a feature, and only to the provider endpoint you set up:

• Ask — the text you selected, plus your Knowledge notes if Knowledge is turned on.
• Summarize — the page title and its readable text, after you click the summary button.
• Dictate — the audio you record (up to 2 minutes), so the provider can turn it into text.
• Setup — a check of your endpoint and key, which asks the provider for its list of models.

Pilbot doesn’t send your browsing history, cookies or anything else. What the provider does with your data is covered by its own terms and privacy policy, so read them before you connect it. With a local server such as Ollama or LM Studio, nothing leaves your computer.

What stays on your device

• Your API key — encrypted with AES-256-GCM. The encryption key is created as non-extractable and kept in the extension’s own storage, so no script can read it out. Your API key is decrypted only in memory, for a single request, and only for the endpoint it was saved with.
• Provider settings — the endpoint, model names and the last 4 characters of a longer key, so you can tell which key is saved.
• Knowledge notes and AI language — in the extension’s local storage. While Knowledge is on, your notes are sent to the provider with every question.
• Preferences — feature switches and theme, in Chrome’s sync storage. If Chrome sync is on, Google syncs them across your devices. Nothing secret is ever stored there.

What Pilbot doesn’t do

• No Pilbot servers, accounts or databases.
• No analytics, tracking, ads or cookies.
• No selling or sharing of your data — its author never receives it.

Security

Web pages can’t read your key or change Pilbot’s settings. The key is sent over HTTPS only (plain HTTP only to a server on your own computer), redirects are refused, and providers’ error messages are never shown in full, so they can’t reveal your key.

No browser extension can protect a key from malware already running on your computer. Use a separate key just for Pilbot, set a spending limit at your provider if it offers one, and revoke the key if anything looks wrong.

Deleting your data

In Pilbot’s side panel, open Settings → Edit provider & API key → Remove saved key, or use the Reset button in the bottom-left corner. Either one deletes the saved provider, the encrypted key and the encryption key. Removing the extension from Chrome deletes all of its local data. To be sure, also revoke the key at your provider.

This website

This website is run by the author of Pilbot.

This site uses no cookies, analytics or third-party resources. If you pick a light or dark theme, the choice is saved in your browser’s local storage and never sent anywhere.

Pilbot itself is downloaded from GitHub. The download button takes you to GitHub, Inc. (USA), where GitHub’s privacy statement applies.

The site is hosted on Cloudflare Pages by Cloudflare, Inc. (USA). To deliver the pages and protect them from abuse, Cloudflare processes standard technical data, such as your IP address and browser type. This is based on a legitimate interest in running a working, secure website (Article 6(1)(f) GDPR). The data isn’t used for anything else and is kept only as long as Cloudflare needs it for that purpose.

Cloudflare may process this data outside the EU, including in the United States. These transfers are covered by the EU-US Data Privacy Framework, under which Cloudflare is certified, and by the EU Standard Contractual Clauses in Cloudflare’s data processing terms. More in Cloudflare’s privacy policy.

Under the GDPR you have the right to access, correct or erase your personal data, to restrict or object to its processing, and to lodge a complaint with a data protection authority. In Slovakia, that’s the Office for Personal Data Protection of the Slovak Republic.

Note: these rights apply whenever personal data is processed. On this site, that’s only the technical data, such as your IP address, that Cloudflare processes to deliver the pages. The author of Pilbot doesn’t collect any personal data directly.

Terms of use

Pilbot may be used for private, non-commercial purposes only. You may not sell, resell, rent, lease, license or sublicense Pilbot or any part of it, include it in a product or service that is paid for or earns money in any other way (for example through ads, subscriptions or donations tied to access), or use it commercially in any other way. You may share unchanged copies, free of charge and with the LICENSE file included.

Pilbot sends requests to the AI provider you choose, using your own API key. Your use of that provider is governed by its own terms, and any costs it charges are yours.

If you break these terms, your permission to use Pilbot ends automatically.

The license itself is in the LICENSE file included in the download and in the GitHub repository. The source code being public doesn’t change these terms: the license applies to it as well. Pilbot’s icons are Material Symbols by Google, used under the Apache License 2.0; see THIRD-PARTY-NOTICES.txt in the download.

These terms apply to your use of Pilbot. If you don’t agree with them, please don’t download or use it.

No warranty, no liability

Pilbot and this website are provided “as is”, without warranty of any kind, express or implied, including the implied warranties of merchantability, fitness for a particular purpose and non-infringement. AI answers, summaries and transcriptions can be wrong or incomplete, so check anything important. To the fullest extent permitted by law, the author isn’t responsible for any errors, data loss, charges from your AI provider or other damage arising from the use of, or inability to use, Pilbot or this website.

Changes

If this policy changes, the new version will be published on this page with a new date.