AI Subscription Saver – Privacy Policy

Effective Date: November 9, 2026 | Last Updated: November 9, 2026

This Privacy Policy explains how AI Subscription Saver – Passwords, API Keys & AI Prices ("AI Subscription Saver", "the extension", "we", "us", or "our", Extension ID: fabljnimgpfjpblfbmmalegcoibcimig) handles user data. Your privacy, security, and digital sovereignty are our highest priorities.

1. Summary & Core Principles

• No External Data Collection: We do not collect, transmit, store, track, or sell your personal data, credentials, or browsing history.
• Client-Side Zero-Knowledge Architecture: All passwords, API keys, logins, and subscription records are encrypted directly on your device using PBKDF2-SHA256 (600,000 iterations) and AES-256-GCM. Your master password never leaves your browser.
• No Backend Servers: AI Subscription Saver does not operate backend servers for user accounts, vault synchronization, or behavioral tracking.
• No Ads or Third-Party Tracking SDKs: The extension contains zero advertisements, telemetry, or analytics trackers.

2. Data Stored Locally on Your Device

All sensitive information is stored exclusively in your local browser storage (IndexedDB and chrome.storage.local), secured by client-side cryptography:

• Encrypted Vault Records: Website credentials, usernames, passwords, API keys, URLs, and private notes. Decryption only happens in temporary memory while the vault is explicitly unlocked by your master password.
• Subscription Tracking Data: Service names, renewal dates, billing cycles, and cost figures saved by the user for subscription budgeting and renewal alerts.
• Public Pricing Cache: Read-only, publicly available AI service pricing tiers retrieved from AISubDeal to show price hints offline without repeatedly querying the web.
• Extension Preferences: Local settings such as auto-lock timer duration and theme preference.

3. Chrome Permissions & Strict Usage Justifications

AI Subscription Saver adheres strictly to Google's principle of least privilege. Each declared permission serves an indispensable, user-facing function:

• storage: Required to persist encrypted vault entries, user settings, subscription reminder dates, and public pricing cache locally on the device.
• alarms: Required to power background timers for vault auto-lock security, periodic price cache refreshes, and the automated clipboard security wiper.
• activeTab: Required only when the user explicitly triggers credential autofill (via the popup action or keyboard shortcut Alt+Shift+L). It temporarily accesses the active tab to identify login/password fields. It does not monitor or access tabs passively in the background.
• scripting: Required to execute the isolated credential autofill helper script into the current active page only upon direct user request.
• idle: Required to detect operating system lock or inactivity to automatically lock the encrypted vault, protecting credentials if the computer is unattended.
• offscreen: Required to host a temporary, isolated offscreen document that automatically overwrites and purges copied passwords and API keys from your system clipboard after 30 seconds.
• notifications (optional): Requested only if the user enables subscription renewal alerts, delivering local desktop notifications before renewals occur.
• https://www.aisubdeal.com/* (optional host permission): Enables the user to fetch optional public price comparison tables. Requests are completely anonymous, sent via GET without user identifiers, vault data, or authentication tokens.

4. Chrome Web Store User Data Policy Compliance

In full compliance with the Chrome Web Store Developer Program Policies:

• We do not sell, rent, lease, or transfer user data to third parties.
• We do not use or transfer user data for purposes unrelated to the extension's core single purpose: an encrypted vault for logins/API keys with autofill and AI subscription price comparisons.
• We do not use or transfer user data to determine creditworthiness or for lending purposes.
• We do not use remote code; all application code is statically bundled inside the signed extension package.

5. Data Retention, Backup & Deletion

Because all data resides strictly on your local machine:

• You may export encrypted, password-protected JSON backups at any time.
• You can delete individual vault entries or purge the entire vault inside the extension settings.
• Uninstalling the extension from Google Chrome immediately and permanently removes all stored data from your device.

6. Children's Privacy

AI Subscription Saver is a general productivity tool and does not knowingly collect or target information from children under the age of 13.

7. Contact Information

If you have any questions or feedback regarding this Privacy Policy or the security of AI Subscription Saver, please contact:

• Developer: robin421
• Contact Email: robin421@gmail.com
• Extension ID: fabljnimgpfjpblfbmmalegcoibcimig

---

AI Subscription Saver 隐私权政策

生效日期：2026 年 11 月 9 日 | 最近更新：2026 年 11 月 9 日

本隐私权政策旨在向您说明 AI Subscription Saver – 密码、API Key 与 AI 订阅比价（以下简称「AI Subscription Saver」或「本扩展」，扩展程序 ID：fabljnimgpfjpblfbmmalegcoibcimig）如何处理用户数据。保护您的隐私和数据安全是我们的核心原则。

1. 概述与核心原则

• 无远程数据收集：我们不收集、不上报、不跟踪、不出售您的任何个人数据、账号凭据或网络浏览历史。
• 端侧零知识加密架构：所有保存的密码、API Key、网站登录凭据及订阅记录均在您的本地设备上使用 PBKDF2-SHA256（600,000 次哈希迭代）及 AES-256-GCM 算法进行高强度加密。主密码绝不离开您的浏览器。
• 无后端服务器：本扩展没有用于存储保管库、用户账号体系或行为分析的后端服务器。
• 无第三方追踪或广告 SDK：本扩展不包含任何第三方广告 SDK、埋点分析或追踪代码。

2. 保存在您本地设备上的数据

所有数据均保存在您的本地浏览器存储（IndexedDB 及 chrome.storage.local）中：

• 加密保管库记录：网站登录凭证、用户名、密码、API Key、网址及安全备忘录。仅在您输入主密码解锁后在内存中解密呈现。
• AI 订阅管理数据：服务名称、续费日期、计费周期与价格，仅用于本地计算到期提醒。
• 公开比价缓存：从 AISubDeal 获取的公开主流 AI 大模型价格梯度对照表，便于离线快速查看。
• 个性化设置：自动锁定超时时长、界面语言与主题偏好。

3. 权限申请及详细用途说明

本扩展严格遵循最小权限原则（Principle of Least Privilege）：

• storage：用于在本地安全保存加密保管库条目、用户偏好设置、续费提醒日期及公开比价缓存。
• alarms：用于在后台执行定时安全任务，包括保管库自动超时锁定、定期更新比价缓存，以及剪贴板敏感密码自动清理。
• activeTab：仅在用户主动触发自动填充操作时（点击扩展弹窗中的填充按钮或按下快捷键 Alt+Shift+L）临时获取当前标签页权限以识别输入框。绝不会在后台被动监控您的网页浏览。
• scripting：用于在用户主动触发填充时，向当前活动标签页注入独立的自动填充脚本。
• idle：用于检测操作系统是否进入锁定或休眠状态，并在设备闲置时自动锁定加密库，防止未授权访问。
• offscreen：用于在后台运行隔离的离屏文档，在用户复制密码或 API Key 30 秒后安全清除系统剪贴板。
• notifications（可选权限）：仅在用户启用订阅续费提醒时，在订阅即将到期前向系统发送桌面通知。
• https://www.aisubdeal.com/*（可选主机权限）：仅在用户选择启用时用于请求公开的 AI 服务比价数据。请求为纯匿名 GET 请求，不携带任何用户凭证或标识符。

4. 遵守 Chrome 应用商店开发者计划政策

我们严格遵守 Google Chrome 应用商店的用户数据保护政策：

• 绝不向任何第三方出售、转让或出租用户数据。
• 绝不将用户数据用于与其单一用途无关的目的。
• 绝不将用户数据用于评估信用度或发放贷款。
• 绝不使用任何远程执行代码（Remote Code）。

5. 数据保存、备份与删除

• 用户可随时将保管库数据以加密格式导出至本地文件。
• 用户可在扩展设置中随时删除单项或清空全部本地数据。
• 在 Chrome 中卸载本扩展将立即并永久清除设备上存储的所有相关数据。

6. 联系方式

如果您对本隐私政策或扩展的安全机制有任何疑问，请通过以下方式联系开发者：

• 开发者：robin421
• 联系邮箱：robin421@gmail.com
• 扩展程序 ID：fabljnimgpfjpblfbmmalegcoibcimig