What stays in your browser
Characters, Character Cards, Personas, settings, and Chats stay in this browser under the hatbox.cc origin. We keep no server-side Chat history and do not sync between browsers or devices.
The ChatGPT session is stored separately in encrypted browser storage.
Hatbox has no advertising or cross-site tracking.
When data leaves your browser
Character imports
Local JSON, PNG, and CHARX files are checked in your browser; we never run scripts or fetch URLs inside a card. For a supported Chub or CharacterHub link, we send only the page URL to our import service.
Model replies
When you ask for a reply, we send the selected model, account authorization, and message context through our service to ChatGPT. Replies stream back without storing a Chat history.
Model and Usage checks work the same way. Usage is reported by ChatGPT; it is not a Hatbox quota.
Service limits and operational records
We use your request IP and a pseudonymous account signal temporarily to limit traffic. Operational logs contain request metadata such as route, model, status, and latency—never IP addresses, credentials, prompts, or replies—and are kept for no more than 30 days.
Your controls
- Me > Data: export a backup, delete Chats, or reset Hatbox records.
- Remove individual Characters or Personas where you manage them.
- Disconnect ChatGPT to remove its stored session while keeping local content.
- Browser site-data controls remove everything stored for hatbox.cc.
Clearing site data can permanently remove local records. Export a backup first.
Hatbox Connect
Hatbox Connect returns a ChatGPT sign-in response only after you confirm the destination. It stores nothing—no tokens, credentials, page content, Chats, or browsing data.
Information received through Hatbox Connect is used only for its disclosed sign-in relay purpose, is not used for advertising or sale, and is not read by humans except where the Chrome Web Store User Data Policy permits.
Questions and privacy rights
Email support@hatbox.cc with privacy questions or for help removing local data. A response time is not guaranteed.
Depending on where you live, you may have legal rights over your personal information. Most can be exercised directly through the controls above—contact us for anything else.
When this policy changes, the date at the top of this page changes.