ChatLodge — Privacy Policy

Last updated: 1 July 2026

ChatLodge is a browser extension by Sanora Tech ("we", "us") that lets you save answers from AI chat services and search them later. ChatLodge is local-first: your saved content lives in your own browser, not on our servers. This policy explains exactly what data ChatLodge handles, where it goes, and the few cases in which anything leaves your device.

The short version: we operate no analytics, no tracking, and no server that stores your readable data. The only times ChatLodge sends anything over the network are (1) validating your Pro license with our payment processor and (2) the optional, end-to-end encrypted Pro sync feature — both described below.

1. Data stored on your device

When you save an answer, ChatLodge stores the following locally in your browser (IndexedDB and extension storage). This data never leaves your device unless you enable Pro sync (Section 4):

The text of the AI answer you chose to save, and its source (which platform, the page URL/title, and the timestamp).
Automatically generated tags and a numeric "embedding" (a vector used for semantic search), both computed on your device.
Your recent search history, settings, and preferences.
If you activate a Pro license: your license key and the license/instance identifiers returned when the key is activated.

You can view, edit, export, or delete this data at any time from the extension, and uninstalling ChatLodge removes all of it from your browser.

2. How ChatLodge reads AI chat pages

ChatLodge requests access only to the specific AI platforms it supports (for example ChatGPT, Claude, Gemini, Perplexity, DeepSeek, Grok, Copilot, Poe, T3 Chat, and Mistral). On those pages, a content script adds a "save" button and reads the answer text only for the answer you explicitly choose to save. ChatLodge does not read, collect, or transmit your browsing on any other website, and it never requests broad ("all sites") access.

3. Semantic search runs entirely on your device

The AI model that powers semantic search (all-MiniLM-L6-v2) is bundled inside the extension and runs fully in your browser. Generating tags, creating embeddings, and running searches involve no network requests and no third party — your queries and content are never sent anywhere for these features.

4. Optional Pro cross-device sync (end-to-end encrypted)

Cross-device sync is a Pro feature that is off by default. You must turn it on and set a sync passphrase to use it. When enabled:

Your vault is encrypted on your device using your passphrase (PBKDF2 key derivation, AES-256-GCM encryption) before anything is sent.
Only the resulting ciphertext is uploaded to our sync service (a Cloudflare Worker with R2 storage). We cannot read your data — your passphrase and the unencrypted content never leave your device, and we never receive them.
The stored encrypted blob is identified by a one-way hash of your license key, not by your name or email.
Because encryption is tied to your passphrase, if you lose your passphrase we cannot recover or reset your synced data.

You can disable sync and delete the encrypted copy from our service at any time from the extension's settings.

5. Payments and license validation

Purchases and subscriptions are handled by our payment processor, Dodo Payments. When you buy Pro, you interact with Dodo's checkout directly; we do not receive or store your card details.

To unlock Pro in the extension, ChatLodge sends your license key (and a device label such as "Chrome on Windows") to Dodo Payments to activate and periodically validate the key. Managing your subscription (for example cancelling) is relayed through our sync service, which uses a secret merchant key held only on the server to talk to Dodo on your behalf; this request identifies you only by your license key and its identifiers.

Dodo Payments processes this information as an independent controller under its own privacy policy: dodopayments.com/privacy-policy

6. What we do NOT do

We do not use analytics, tracking pixels, advertising, or fingerprinting.
We do not sell, rent, or share your data with third parties.
We do not run any server that stores your readable (unencrypted) content.
We do not collect your data for AI training.

7. Data retention and deletion

Local data: removed when you delete entries in the extension or uninstall it.
Synced data (Pro): removed when you delete the cloud copy from settings or disable sync; it is stored only as ciphertext until then.
License/payment records: retained by Dodo Payments per their policy and any legal/accounting obligations.

8. Children

ChatLodge is not directed to children under 13 (or the minimum age in your jurisdiction) and we do not knowingly collect their data.

9. Changes to this policy

We may update this policy as ChatLodge evolves. Material changes will be reflected by the "Last updated" date above and, where appropriate, noted in the extension or on our website.

10. Contact

Questions or requests about your data:

Sanora Tech — [email protected] — sanoratech.com