1. Who we are
blank is a Chrome extension and this website, run by Tanguy Derrien, an individual based in Milan, Italy ("blank", "we", "us"). For the purposes of the EU General Data Protection Regulation (GDPR) and the Italian Personal Data Protection Code, we are the data controller for the personal data described here.
You can reach us about anything in this policy at tanguy.derrien06@gmail.com.
2. What this policy covers
This policy covers the blank extension for Chrome, the blank server that connects the extension to AI models, and this website. It does not cover the websites you visit while using blank, or the services of the AI model providers, which have their own policies.
3. Data stored on your computer
The following stays in Chrome's storage on your device. It is not sent to our servers, and we cannot see it:
- Memory: facts you ask blank to remember, facts you add or edit on the Memory screen, and facts imported from another assistant.
- Chats: your recent conversations (up to 60), so you can return to them.
- Apps: small apps blank builds for you, their versions, and the data you enter into them.
- Settings: your preferences, such as theme and voice options, and your own OpenRouter key if you choose to add one.
- Install ID: a random identifier created when you install blank (see section 5).
- Voice model: the speech-to-text model files, once downloaded (see section 6).
Removing the extension deletes this data from your browser. You can also delete any memory line, chat or app at any time inside blank, and download a backup of your memory as a file.
Parts of this data leave your device only inside a message you send. For example, when a remembered fact is relevant to your question, blank includes it in that message so the model can use it (see section 4).
4. Messages and AI models
When you send a message, blank sends the following to the AI model that will answer it:
- what you typed or said;
- the text of the page you're on, when you attach it or when your message refers to it, and a screenshot of the page when its text can't be read;
- images, screenshots and text files you add;
- earlier messages in the same chat, so the model has context;
- remembered facts that are relevant to the message;
- instructions that describe blank's voice and abilities.
Selecting text and pressing Alt A, or using "Ask blank" from the right-click menu, puts that text in your message.
Route. By default, messages go from your browser to the blank server, which adds blank's access key and forwards them to OpenRouter, an AI gateway. OpenRouter passes the request to the company that runs the chosen model, or to a hosting provider that serves it. The answer streams back the same way. If you add your own OpenRouter key, messages go straight from your browser to OpenRouter under your own account and terms, without passing through our server.
What our server keeps. Our server does not store the content of your messages or answers. It reads each request only to check that the model is allowed and that the request is within the usage limits, then passes it on. When a model provider returns an error, a short extract of that error message may appear in our server logs for troubleshooting.
Choosing the model. Before a message is answered, blank asks Jev, a decision model from TypeSafe AI served through OpenRouter, which model should answer it. For this, the first 1,500 characters of your message are sent, together with the kind of task, whether a page or files are attached, and the list of models blank can use. Page text, images, files and memory are not sent for this step. Very short messages and messages sent with Max on skip it.
Building apps. When you ask blank to build or change an app, your request and the app's code are sent to a model in the same way.
Importing memory. When you import an export from ChatGPT or Claude, the file is opened on your computer. blank reads only your own messages from it and sends them, in batches, to a model that picks out lasting facts about you. The facts are then saved on your computer. Restoring a blank memory backup sends nothing.
Model providers. The models blank currently uses come from Anthropic, OpenAI, Google, DeepSeek, Perplexity and Z.ai. Each provider processes your message to produce the answer and may handle it under its own terms and privacy policy, which can include keeping it for a limited time for safety and abuse monitoring. Please don't send passwords, payment card numbers, health records or other sensitive information you wouldn't want processed by these services.
5. Usage limits
blank pays for the AI models it uses, so each person gets a daily allowance. To enforce it, every request to our server carries the random install ID. When usage limits are switched on, our server records, per day:
- your install ID and the cost of the requests made with it;
- a one-way hash of your IP address (combined with a secret value, so the address itself is not stored), and the cost of requests from it;
- the total cost across all users.
These records contain no message content. They are stored with our database provider, Supabase. Our hosting provider, Vercel, also processes your IP address and keeps standard technical logs (such as time, address and response status) for a short period to run and protect the service.
6. Voice
Voice input is optional. When you turn it on, Chrome asks for permission to use your microphone. blank turns your speech into text with a model that runs on your computer, and only the resulting text is sent, as a normal message. Audio is never uploaded.
The first time you use voice, blank downloads the speech model (about 75 MB) from Hugging Face, which receives your IP address as part of that download. The model is then kept on your computer.
7. Chrome permissions
blank asks Chrome for these permissions, and uses each one only for the purpose described:
- Side panel
- To open blank beside the page you're on.
- Access to websites
- To read the text of the page you're on, or take a screenshot of it, when you ask about it, and to show a small "blank answered" note on the page when an answer finishes while the panel is closed. blank does not read pages in the background, and it does not otherwise change, click or type on pages.
- Scripting
- To get the page text and your selected text when you ask about them, and to show the "blank answered" note.
- Storage and unlimited storage
- To keep your memory, chats, apps and the voice model on your computer.
- Context menus
- To add "Ask blank" to the right-click menu.
- Notifications
- To tell you an answer is ready when you're in another app. You can turn this off in blank's settings.
8. This website
This website does not use cookies, analytics, advertising or tracking. Fonts and images are served from the site itself, so visiting it makes no requests to third parties. The company hosting the site processes your IP address and keeps standard request logs to deliver and protect it.
9. Legal bases
Under the GDPR, we rely on:
- Performance of a contract (Article 6(1)(b)) to send your messages to AI models and return answers, which is the service you ask blank for.
- Legitimate interests (Article 6(1)(f)) to record usage, enforce daily limits, keep logs, and prevent abuse and fraud. Our interest is keeping blank available and affordable for everyone. You can object to this processing (see section 13).
- Consent for microphone access, which you give in Chrome and can withdraw at any time in Chrome's site settings.
- Legal obligations (Article 6(1)(c)) where we must keep or disclose information by law.
11. International transfers
Some of these providers are based in, or process data in, countries outside the European Economic Area, including the United States and China. Where this happens, transfers rely on an adequacy decision (such as the EU-US Data Privacy Framework, for providers certified under it), on the European Commission's Standard Contractual Clauses, or, for model providers you choose to reach through blank, on the transfer being necessary to provide the service you request (Article 49(1)(b) GDPR). You can ask us for more information about the safeguards in place.
12. How long we keep data
- Data on your computer: until you delete it in blank or remove the extension.
- Message content: not stored by our server. Model providers keep it according to their own policies.
- Usage records: up to 90 days, then deleted.
- Server and hosting logs: for the short period set by our hosting provider, usually a few days at most.
- Emails you send us: as long as needed to answer you and keep a record of the exchange.
13. Your rights
Under the GDPR you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. Where we rely on consent, you can withdraw it at any time.
Most of your data is already in your hands: you can view, edit, export and delete your memory, chats and apps inside blank. For data we hold, such as usage records linked to your install ID, write to us and include your install ID if you can, since we have no other way to connect records to you. We will answer within one month.
You also have the right to complain to a data protection authority. In Italy this is the Garante per la protezione dei dati personali (garanteprivacy.it). You can also contact the authority in the EU country where you live or work.
14. Children
blank is not meant for children under 14. If you are under 18, please use blank only with permission from a parent or guardian. If you believe a child under 14 has given us personal data, contact us and we will delete it.
15. Security
Connections between blank, our server and our providers are encrypted with HTTPS. Our access keys stay on the server and are never sent to your browser. Usage records are stored in a database that only the server can reach. Code built for your apps runs in a sandboxed window. No system is perfectly secure, so please keep your computer and Chrome profile protected.
16. Chrome Web Store User Data Policy
blank's use of information complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. We use data only to provide and improve blank's single purpose, an AI assistant in the side panel. We do not sell it, use it for advertising or creditworthiness, or let people read it, except with your permission, for security, or when required by law.
17. Changes to this policy
We will update this policy when blank changes, for example when accounts, sync or paid plans arrive. The date at the top shows the latest version. If a change significantly affects how we use your data, we will tell you in the extension before it takes effect.
18. Contact
Tanguy Derrien, Milan, Italy
tanguy.derrien06@gmail.com