Privacy Policy
1. Who we are
Essence Extractor (the "Service") is a Chrome browser extension and supporting cloud service operated by Maxim Zhuravlev (IP Журавлев Максим Юрьевич), a sole proprietor registered in Saint Petersburg, Russia under ОГРНИП 321784700381292, ИНН 780539366990. We trade as VibeCodium.
For privacy questions, contact us at pro@vibecodium.ai.
2. What data we collect
2.1 Data you actively send to us
- Conversation text. When you ask the extension to extract a brief, it sends the dialogue you choose to our Cloudflare Worker, which forwards it to an AI provider for analysis. The dialogue and the resulting brief are not written to any persistent log on our side.
- Anonymous device ID. The extension generates a random identifier the first time it runs. We use it solely to enforce free-tier usage limits (5 analyses per week) and to associate a Pro subscription with your install. The ID is not tied to your name, email, or any account.
- Pro license key. If you enter a license key, the extension sends it together with the anonymous device ID to our server only to activate or restore your subscription. The key is saved in Chrome storage so you do not need to enter it again.
- Network address. Like any HTTPS service, our server receives your IP address. We use it only for short-lived abuse prevention and Cloudflare Turnstile verification, never for advertising, profiling, or location tracking.
- Share link content. If you explicitly click the Share button on a brief, we store that one brief in our key-value store with a randomly generated identifier. You can delete a share at any time by request. Otherwise no brief is persisted on our server.
On your device, Chrome storage keeps your preferences, consent choice, quota state, Pro license key, up to 50 recent analysis results, and any anonymous product events waiting for delivery. This local history is not sent to us unless you explicitly analyze or share its content.
2.2 Billing data (when you purchase Pro)
We never see or store your card details. Payment is handled by our processors:
- Lemon Squeezy handles international Pro subscriptions and shares with us only your email address, country, and subscription status.
- YooKassa handles Russian-card and SBP payments via our Telegram bot and shares only the transaction status and chat ID.
2.3 What we don't collect
- No email, password, or sign-up form.
- The extension sets no cookies. The marketing website uses Google Analytics (GA4), which sets cookies for anonymous, aggregate traffic stats only — it never receives the conversations you analyze (see §2.4).
- No browsing-history tracking. The extension activates only when its side panel is opened and you click Extract.
- No third-party analytics scripts inside the extension itself.
2.4 Cookies and website analytics
The extension sets no cookies and uses no third-party analytics. After you continue past its first-run disclosure, it sends a small number of anonymous, cookieless product events (for example: side panel opened, analysis started, analysis outcome) to our own server — never tied to your identity and never including the conversations you analyze — so we can measure activation and reliability. Each event carries a new random delivery ID used only to prevent a network retry from being counted twice; it is never reused as a user or device identifier. Our marketing website (essencextractor.com) uses Google Analytics 4 to understand anonymous, aggregate traffic — pages viewed, approximate region (derived from IP by Google; we do not store your IP), and browser/device type. This data is never linked to your identity and never includes the conversations you analyze in the extension.
Analytics is off by default: Google Analytics is not loaded and no data is sent to Google until you accept via the cookie banner shown on your first visit (Google Consent Mode v2). Our legal basis is your consent (GDPR Art. 6(1)(a) and applicable ePrivacy rules). You can decline, or withdraw consent later by clearing this site's stored data (cookies and local storage) in your browser. See Google's Privacy Policy and the Google Analytics opt-out.
3. How we use the data
- To deliver the core service — sending your conversation to the AI provider and returning the brief.
- To enforce free-tier and Pro-tier usage limits using your device ID.
- To process Pro subscriptions and pay-as-you-go packs.
- To respond when you contact us at pro@vibecodium.ai.
We do not use your data for advertising, profiling, or sharing with parties other than the subprocessors listed below.
4. Subprocessors
We rely on the following third parties to deliver the Service. Each receives only the data necessary for its function.
| Provider | Role | Data received | Jurisdiction |
|---|---|---|---|
| Cloudflare, Inc. | Hosts our Worker, KV store, and Queues | Conversation text in transit; share-link contents (opt-in); anonymous product events; device ID and license key for quota/subscription validation; IP address for short-lived abuse controls | USA |
| kie.ai Inc. | Claude API gateway — fallback model provider | Conversation text in transit for inference | International |
| Anthropic PBC | Claude model provider — last-resort fallback | Conversation text in transit for inference (zero-retention by Anthropic policy) | USA |
| Google LLC | Gemini 3.1 Pro API — primary model provider | Conversation text in transit for inference | USA |
| Google LLC (Google Analytics) | Website traffic analytics — marketing site only, opt-in | Anonymous usage data: pages, approximate region, device/browser — no conversation content, no account data | USA |
| Lemon Squeezy LLC | International Pro subscriptions | Email, billing address, payment method (we do not see card data) | USA |
| NKO YooMoney LLC / Avanpost LLC | Russian-card / SBP payments via Telegram bot | Telegram user ID, payment amount, fiscal receipt data per Russian FZ-54 | Russia |
| Telegram FZ-LLC | Telegram bot delivery and Telegram Stars payments | Telegram user ID, messages you send to our bot | UAE |
None of these subprocessors are used to log or persist your conversation content under our instruction. Conversation text passes through Cloudflare and the model provider for the few seconds needed to generate a brief, and is then released.
5. Data retention
| Conversation text | Not logged. Held in memory only for the duration of the extraction request (typically 20–60 seconds). |
| Generated brief | Returned to your browser. Not stored on our side unless you click Share. |
| Share-link contents | Stored in Cloudflare KV until you delete the link or 30 days have passed, whichever comes first. |
| Device ID + usage counter | Stored until the relevant week / day window expires (free tier: 7 days; Pro tier: 24 hours). |
| IP-based abuse-control entry | Used only for rate limiting or Turnstile verification and expires after the applicable daily window (normally within about 25 hours). We do not use it to infer or store your location. |
| Pro license key | Stored in Chrome storage on your device until you remove it or uninstall/clear the extension. Server-side subscription records follow the retention period below. |
| Extension product telemetry | Anonymous daily event counts and random single-event delivery receipts are retained for up to 100 days. Receipts contain no conversation, account, device or user identifier. |
| Pro subscription record | Stored for the lifetime of the subscription and 12 months after cancellation for accounting and audit obligations. |
| Billing records | Held by Lemon Squeezy / YooKassa under their own retention policies. We also retain transaction metadata for 4 years as required by Russian tax law. |
| Website analytics (Google Analytics) | Only if you accept analytics cookies: the _ga cookie persists up to ~2 years on your device; aggregate data is retained by Google per our GA data-retention setting. |
6. International data transfers
Because our Worker runs on Cloudflare's global edge and our AI providers are located in the United States, your conversation content will be processed outside your country of residence in most cases. We rely on the providers' standard contractual clauses and their privacy frameworks (including the EU-US Data Privacy Framework where applicable) for these transfers.
7. Your rights
Depending on where you live (EU/EEA, UK, California, Russia, and others), you may have the right to:
- Ask what data we hold about you (typically just your device ID and any active share links).
- Request deletion of share links you created.
- Request deletion of Pro subscription records (subject to legal retention obligations).
- Lodge a complaint with your local data-protection authority.
To exercise any right, email pro@vibecodium.ai. We respond within 30 days.
8. Children
The Service is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has used the Service, contact us and we will delete any associated records.
9. Security
The extension's Content Security Policy locks all outbound network traffic to a single endpoint — our Cloudflare Worker. The Worker holds the AI provider keys server-side; they are never exposed in your browser. Communications use HTTPS end-to-end.
To protect the Service against automated abuse, the extension performs an invisible bot-verification check using Cloudflare Turnstile. Turnstile runs silently, sets no cookies, and does not track you across websites; to tell humans from bots it may process technical signals such as your IP address and browser characteristics. Your use of Turnstile is subject to the Cloudflare Privacy Policy and the Cloudflare Turnstile Privacy Addendum.
No system is perfectly secure. If you believe you've discovered a security issue, please report it to pro@vibecodium.ai.
10. Changes to this Policy
We may update this Policy from time to time. Material changes will be flagged at the top of this page and, where appropriate, announced in the extension. The "Last updated" date above always reflects the current version.
11. Contact
Maxim Zhuravlev (IP Журавлев Максим Юрьевич)
198216, Saint Petersburg, Leninsky Prospekt 134, apt. 92, Russia
ОГРНИП 321784700381292 · ИНН 780539366990
Email: pro@vibecodium.ai