Your chats stay on your device

Effective 15 October 2026 · Covers the mcosec.ai Chrome extension (version 3.0 and later) and this website.

0 servers see your chats
0 trackers or ads in the extension
0 accounts needed

Short version: the mcosec.ai extension works entirely inside your browser. It has no servers, no accounts, no analytics and no ads, and nothing you type or read is sent to us. The only time we receive personal information is if you choose to support us with a payment.

What the extension reads

Your chat, only when you ask. When you press Read this chat, mcosec.ai reads the conversation on the ChatGPT, Claude or Gemini page you have open: your messages and the AI's answers. It does this once, at that moment. It never reads chats in the background.
The message box, only for features that need it. For example, the optional Optimize button reads the prompt you typed so it can shorten it, and "Copy and continue" places text in the message box of the AI site it opens.
Prompts you send, only if you turn this on. The optional "Save prompts I send" setting (off by default for new installs) saves the text you send with Enter to your library.

The extension only runs on chatgpt.com, chat.openai.com, claude.ai and gemini.google.com. It never presses Send for you.

What is stored, and where

Everything the extension stores stays in your own browser profile, on your device:

What	Where	How long
The last chat you read and its compacted version (so it survives the popup closing)	Extension's local database (IndexedDB)	Until you press Clear, read another chat, or use Delete all data
Saved prompts, handoffs and feedback (extra tools only)	Extension's local database	Until you delete them
Usage counts: numbers only (chats read and moved, estimated tokens saved, which AI sites, per day for 90 days). No chat text.	`chrome.storage.local`	Until you press Reset counts or Delete all data
Settings	`chrome.storage.local`	Until you remove the extension
Text waiting to be placed in a newly opened AI tab	`chrome.storage.session`	Used once, removed within 5 minutes

You can export or delete all of it in the extension's Settings. Removing the extension removes it all.

What is sent, and to whom

Nothing is sent by the extension. Its pages are blocked by their security policy (connect-src 'none') from making any network request.

Text only leaves your device when you send it: after "Copy and continue", the compacted chat is in the new AI site's message box, and it goes to that AI company only if you press Send there. That company's own privacy policy then applies.

This website and support payments

Browsing this website: no cookies and no advertising trackers. We use Vercel Web Analytics to count visits: it records the page viewed, the referring site, and your approximate country, device type and browser, without cookies and without identifying you. It only shows us totals. Our host (Vercel) also keeps standard technical server logs, such as IP address and pages requested, to run and protect the site. The extension itself has no analytics.
If you donate through Razorpay (UPI, card, netbanking or wallet): the payment window is run by Razorpay under its privacy policy. Razorpay's script loads only when you press Donate; visitors who don't donate never load it. We never see your card, UPI PIN or bank details. We receive what Razorpay shares with merchants for each payment, such as your email address, phone number, the amount, the date and the payment ID. Our server only checks that the payment is genuine; it doesn't store your details.
If you support us by UPI: your UPI app shows us your name or UPI ID, the amount and the transaction ID. If you email us to claim your gift, we also get your email address.
What we use it for: only to send your receipt and thank-you gift (your free month of Pro), to answer your emails, to handle refunds, and to keep the payment records the law requires.
How long we keep it: payment records for as long as tax and accounting law requires; your email for the gift only until it has been delivered and used, unless you join the waitlist.
We never sell or share it, and we don't use it for advertising.

What we do not do

We do not collect, sell, share or transfer anything the extension reads. We never receive it, including your usage counts.
We do not use any data for advertising, credit decisions or training AI models.
The extension does not load any remote code.

Your rights

You can ask us to see, correct or delete the payment or contact details we hold about you, subject to the records the law requires us to keep. Email us and we will reply within 30 days.

Children

mcosec.ai is not directed at children under 13, and we do not knowingly collect information from them.

Changes

If a future version changes what is read, stored or sent (for example, the planned Pro features), this policy will be updated before that version is published, and any online feature will be opt-in.

Contact

Questions or requests: itsprashantdev@gmail.com