VOID — Privacy Policy
Version 1.0 — 2026-07-20 Data controller: Ilyas HILALI, entrepreneur individuel, France — contact: dev@hilali.fr
1. What VOID is
VOID is a Chrome extension that deletes parts of your browsing history, site storage (cookies, localStorage, IndexedDB, Cache Storage, Service Workers), and open tabs, based on natural-language instructions you type. Decisions about what to delete are made by an AI model (DeepSeek V4 Pro) reached through our backend proxy.
2. Data that NEVER leaves your device
- Your full browsing history (it is read locally by the extension and never uploaded as-is).
- The Spectre — the local, AES-256-GCM-encrypted archive of purged entries that powers the Undo feature. It lives in the extension's IndexedDB on your machine, the encryption key is generated and stored on your machine, and entries expire automatically after the retention period you configure (default: 30 days).
- Your settings and allowlist (stored in
chrome.storage.local).
3. Data sent to our backend (Cloudflare Worker)
| Data | When | Why |
|---|---|---|
| Email address | Login | Account creation + sign-in (6-digit one-time code, no password) |
| List of visited domains (+ up to 4 sample page titles per domain, if "Send titles" is ON) | Every AI purge analysis (level 1) | Lets the AI decide which domains match your instruction |
| Full URLs of pages belonging to domains the AI flagged as ambiguous | Level-2 refinement only, when such domains exist | Page-by-page decision. URLs can contain query parameters — this is the most sensitive flow, see §4 |
| Your prompt text | Every analysis | The instruction itself |
Language tag (navigator.language) |
Every analysis | The AI answers in your language |
4. The level-2 URL flow — read this
When a domain is partially relevant (e.g. you asked to erase "social media" and you use Reddit both for doomscrolling and for work), the extension sends the full URLs of that domain's pages to the AI for a per-page decision. URLs may reveal specific pages you visited, including query strings.
Mitigations in place: payload is capped (≤ 500 pages, ≤ 400 characters per URL, titles truncated), sent over HTTPS only, and never stored server-side (see §6). You can reduce exposure by disabling "Send titles" in the options (titles are then stripped before sending).
5. Sub-processors
| Processor | Role | Data received |
|---|---|---|
| Cloudflare (Workers, D1, KV) | Hosting, database, session cache | Account data, request logs |
| OpenRouter (DeepSeek V4 Pro) | AI decisions | Domains, titles/URLs as above, prompt |
| Stripe | Payments | Email, payment details (card data never touches our servers) |
| Resend | Transactional email | Email address, login codes |
6. Server-side storage & retention
| Data | Where | Retention |
|---|---|---|
| Email, plan, Stripe customer id | D1 database | Until account deletion |
| Session tokens (hashed) | D1 + KV | 30 days |
| Login codes (hashed) | D1 | 10 minutes, single-use |
| Monthly quota counters | D1 | Reset monthly |
| Rate-limit counters | KV | ≤ 1 hour |
| Idempotency keys | KV | 6 hours |
| Prompts, domains, URLs sent for analysis | Not stored (transit only) | — |
We do not run analytics or tracking. We do not sell data. Server logs (Cloudflare) may retain request metadata per Cloudflare's own policy.
7. Your rights (GDPR)
You can: export your data (settings + Spectre, from the options page), delete your local data (extension options → reset), and request account deletion by emailing dev@hilali.fr. Account deletion removes your email, plan, and sessions from D1/KV within 30 days. Local data is yours to delete at any time; uninstalling the extension removes it.
You also have the right to access, rectify, restrict, or object to the processing of your personal data, and the right to data portability. If you believe your rights are not respected, you may lodge a complaint with the supervisory authority — in France, the CNIL (cnil.fr).
8. Children
VOID is not directed at children under 16.
9. Changes
The current version of this policy is published at https://void.hilali.fr/privacy We will bump the version date above at every change.