Skip to content

Privacy policy.

What Supfoldr keeps, where it keeps it, and the anonymous usage data it sends.

Last updated November 2, 2026Applies to the Supfoldr extension and this website

The short version

  • Your data stays in your browser. Folders, tags, notes, bookmarks, highlights, prompts and settings are saved on your computer, in the extension's own storage.
  • Your chats never leave your browser. Supfoldr has no account system and no server of its own, so nothing you add is sent to us or anyone else.
  • Anonymous usage analytics. The extension sends anonymous usage events, such as installs, updates, daily use and errors, to our analytics provider, Moderok. Your chats, prompts, notes and anything else you add are never part of them.
  • License checks. If you buy Pro or Lifetime, the extension checks your license key with Lemon Squeezy, the store that sold it. Nothing else goes with it.
  • No ads, no cookies on this website. It counts visits and button clicks with Umami, a cookieless analytics service that doesn't identify you.

What the extension stores

To do its job, Supfoldr keeps this on your device, in your browser profile:

WhatWhy
Folders: names, colors, icons, order, pinsTo show your folder tree
Saved chats: the chat's ID, title, site and folderTo list and open the chats you filed
Tags, notes, bookmarks and highlights, including the text you highlightedTo show them on the chat and in search
Your saved prompts and categoriesFor the // picker
Settings, such as your theme and which features are onTo remember your choices

It is kept in the browser's extension storage (an IndexedDB database named supfoldr and chrome.storage.local). It does not leave your computer, and it is not synced to your other devices.

How it works with the AI sites

Supfoldr runs inside ChatGPT, Claude, Gemini and Grok while you have them open. To add its features it reads what those pages show and, using the session you are already signed in with, calls the same site's own endpoints, for example to list your chats, read a chat you export, or check whether a saved chat still exists.

These requests go only between your browser and the AI site you are on. Supfoldr doesn't copy your chats anywhere else.

Some features act on the site for you when you ask them to: inserting a prompt, sending one question to several AIs with Ask all, or archiving and deleting chats in bulk. Those actions reach the AI site exactly as if you had done them yourself, and that site's own privacy policy applies to them.

Browser permissions

Each permission Supfoldr asks for serves the one purpose of organizing your AI chats:

  • Storage, to save the data listed above in your browser.
  • Access to chatgpt.com, claude.ai, gemini.google.com and grok.com, to show folders and tools inside those sites and to call each site's own endpoints with the session you are signed in with, as described above.

Supfoldr doesn't read pages on any other website. It has no access to your browsing history, your cookies, other tabs, or what you type on other sites.

Usage analytics

To see how many people use Supfoldr, which features they use and what breaks, the extension sends anonymous usage events to Moderok (moderok.dev), an analytics service for browser extensions.

  • What is sent: a random ID made when you install the extension (not linked to your name, email or AI accounts), the extension's version, your browser, operating system and language, when the extension is installed, updated, first opened and removed, one ping a day while you use it, which Supfoldr features you use (for example that a folder was created or a chat exported as PDF, never what it contains), and error reports from the extension's own code. When you remove the extension, Chrome opens a short goodbye page on supfoldr.app, which reports the removal to Moderok with the random ID.
  • What is never sent: your chats, chat titles, prompts, notes, tags, highlights, folder names or anything else you add, the pages you visit, and your AI accounts.
  • No cookies or fingerprinting. The random ID is kept in the extension's storage and is gone when you remove the extension.
  • How long it is kept: Moderok keeps these events with no time limit. They carry no name or email, so we can't tell which events are yours or find them on request. Removing the extension stops them for good.

License checks

If you activate Pro or Lifetime, the extension sends your license key to Lemon Squeezy (lemonsqueezy.com), the store that sold it, to check that the key is valid and which plan it is for.

  • When: when you activate the key, about once a day after that, when you open the Plan page in the Manager, and when you remove the key there, which frees its activation. When you remove the extension itself, the goodbye page Chrome opens frees that browser's activation too. The extension leaves the key and activation ID for it in the page's address, after the #, a part browsers never send to a server, and the page clears it from the address bar.
  • What is sent: the license key, plus a label for this activation (such as "Supfoldr · Chrome · macOS") and the activation ID Lemon Squeezy gave it, so you can see and free your activations.
  • What is never sent: your chats or anything you add, and your usage events.
  • What comes back: whether the key is active, the plan and store it belongs to, and when a subscription's key expires. The extension keeps the key and the last answer in its own storage, and removing the extension deletes them.

Exports, downloads and the clipboard

When you export a chat or a folder, the file is built in your browser and saved to your Downloads folder. When you copy answers from Ask all, the text is written to your clipboard only at that moment, because you clicked it.

What we share

We never receive your chats or anything you add, so we have none to sell, share or hand over. The anonymous usage events above go only to Moderok, and this website's visit counts go only to Umami. Both process them for us, and we don't sell or share them with anyone else.

Paid plans are sold through Lemon Squeezy, which acts as the merchant of record. Lemon Squeezy collects your payment details, email address and billing country to process the payment and handle taxes, under its own privacy policy. We never see your card details. We receive what we need to give you your license and support you: your name, email address, the plan you bought and your license key.

Your control and deleting data

  • Delete any folder, tag, note, bookmark, highlight or prompt from the extension at any time.
  • Removing the extension from your browser deletes everything it stored.
  • Removing the extension also stops the usage analytics.
  • Because what you add never reaches us, we can't see, restore or delete it for you.

Your rights

The only data about you that we can reach is the purchase details Lemon Squeezy passes to us (your name, email address, plan and license key). For it, you can:

  • ask for a copy of what we hold about you,
  • ask us to correct it, or
  • ask us to delete it.

These are your rights under the GDPR and the UK GDPR, and we give them to everyone, wherever you live. The usage events in Moderok carry no name or email, so we can't link them to you, and removing the extension stops them. Email hi@supfoldr.app from the address you bought with, and we'll answer within 30 days. We may keep purchase records for as long as tax and accounting rules require. Everything else Supfoldr stores is in your own browser, under your control, as described above.

This website

This website loads its fonts and images from its own files. It uses no ads and no cookies.

To see how many people visit and which buttons they click, the website uses Umami, a cookieless analytics service.

  • What is counted: the page you open, the site that linked you here, campaign tags in the link (such as utm_source), your browser, operating system, device type, screen size, language, and your country, region and city, and clicks on the install and pricing buttons.
  • What is not: nothing is stored on your device, and nothing follows you to other sites. To count unique visitors, Umami makes a one-way hash of your IP address and browser that changes every month. Your IP address itself is not stored, and Umami doesn't know who you are.
  • Where it goes: to Umami, under its own privacy policy. Visits are counted only in totals, so there is nothing personal to look up or delete.

Links to other sites, such as the AI sites or the Chrome Web Store, are covered by those sites' own policies.

Children

Supfoldr is a tool for the AI sites you already use and follows their age requirements. We don't knowingly collect personal information from anyone, including children.

Changes to this policy

If what the extension does with your data changes, we'll update this page and the date at the top before the change ships.

Questions

Email hi@supfoldr.app. A person reads every message.