Fix English — Privacy

Support and privacy: fixenglish.support@gmail.com

# Fix English privacy notice — V0.3 beta draft

Last updated: 8 September 2026. This is a draft for the proposed hosted beta. Before distribution, the operator must publish this notice at a public HTTPS URL and confirm the operator identity and actual provider settings.

Support and privacy contact: [fixenglish.support@gmail.com](mailto:fixenglish.support@gmail.com). Please do not include API keys or confidential text in support requests.

## What happens when you use Fix English

Fix English corrects English while trying to preserve your meaning and voice. It sends the text you explicitly select in an editable field only after you invoke **Fix English**, using its keyboard shortcut, context menu, or extension button. It does not continuously read everything you type, scan pages in the background, or automatically transmit keystrokes.

Only the selected text is sent for correction. It may contain personal or confidential information if you select such information. The extension does not send the page's URL or title, surrounding field text, browsing history, or clipboard contents. Password and read-only fields are unsupported.

The extension temporarily holds the selected text, editor state needed to detect intervening changes, and the correction in browser memory. For the conflict check, editor state can include the field's full value or rich-text markup, but that state is not sent to our service or saved to extension storage. A pending selection expires after 28 seconds; Undo retains a temporary restoration state for up to eight seconds, or until an intervening edit/focus change. The website where you edit text can of course observe and store changes in its own editor under its own privacy policy.

## Service providers and purpose

Production requests travel over HTTPS to our backend hosted by **Cloudflare**, then over HTTPS to the **OpenAI Responses API**. These providers process selected text to deliver the correction and operate their services. The backend, not the extension, holds the OpenAI API key and chooses the model and editing instructions. Processing may take place outside your country; this beta does not promise regional residency.

We request `store: false` and do not create OpenAI conversations or use background mode. This does **not** guarantee that OpenAI never temporarily retains API inputs or outputs. OpenAI's published default API abuse-monitoring retention can be up to 30 days, with applicable exceptions; different controls require specific account eligibility/configuration. Fix English does not claim Zero Data Retention. The operator must verify the actual account settings before publishing this notice. OpenAI states API data is not used to train its models by default unless a customer opts in; the operator must not opt this project in without updating this notice and obtaining any required consent.

## What Fix English stores

Our application does **not** persist original or corrected text in a database, analytics, application logs, request logs, or an error-reporting service. Responses request no caching. We have not integrated product analytics or session replay. No `fix_started`, `fix_success`, `fix_failed`, `undo`, page-level, or per-user analytics events are collected.

To limit abuse and API costs:

- The extension creates a random installation ID on its first production correction and keeps it in Chrome's local extension storage until that storage is cleared or the extension is removed. It is not synced by the extension and is not an authentication secret.
- A request includes that ID. Cloudflare necessarily receives network information including an IP address. The backend derives daily keyed hashes of the installation ID and the network address (IPv6 is grouped by /64).
- A Cloudflare Durable Object stores those pseudonymous daily keys, numeric request/token-reservation counters, expiry times, and short concurrency leases. It does not receive text, raw IPs, or raw installation IDs. These keys are pseudonymous, not guaranteed anonymous.
- Counters expire at the end of their minute/day window. Expired records are removed on later quota operations or an hourly cleanup alarm, normally within an hour of expiry; failed alarms/platform incidents can delay cleanup. Leases expire after 35 seconds. Cloudflare's SQLite point-in-time recovery can preserve earlier database versions for up to 30 days, including deleted quota metadata. Those backups contain no application text.

Cloudflare and OpenAI may retain their own operational/security records under their services' terms and the operator's actual account configuration. Cloudflare infrastructure metrics such as aggregate requests, errors, CPU and storage usage remain available. Workers application/request observability is disabled in the checked-in configuration; the operator must keep body/header capture, request tracing, log exports and external error capture disabled for this endpoint. This notice cannot promise deletion from provider-controlled records beyond the applicable contract.

## Advertising, sale and choices

We do not sell your data or use it for advertising. There are no advertising SDKs, tracking pixels, or third-party product analytics in this release. We use quota metadata only to operate and protect the correction service.

You control which text you select and whether you invoke Fix English. Uninstalling the extension removes its local installation ID; it does not immediately remove expiring server quota metadata or provider security records. You can use Undo while available, but Undo does not retract an already submitted API request.

For a development-only installation, selected text instead goes first to your own `127.0.0.1:8787` server, which calls OpenAI with your own key. That version stores a local access token in extension settings. The hosted production package does not require or ship that token or an OpenAI key.

Provider references: [OpenAI API data controls](https://developers.openai.com/api/docs/guides/your-data), [Cloudflare privacy policy](https://www.cloudflare.com/privacypolicy/), and [Durable Object SQLite recovery](https://developers.cloudflare.com/durable-objects/api/sqlite-storage-api/).