What stays in your browser
Characters, Character Cards, Personas, settings, and Chats stay in this browser. Hatbox keeps no server-side Chat history and does not sync between browsers or devices.
Your provider sign-in is encrypted and stored separately in this browser. Hatbox has no advertising and no cross-site tracking.
When data leaves your browser
- Character importsLocal JSON, PNG, and CHARX files are checked in your browser; their scripts and links never run. If you actively import from a supported public URL, Hatbox sends only the page URL to our import service so it can retrieve the Character data from the supported source.
- Model repliesReplies send the selected model, your account authorization, and compiled message context through our service to the provider you selected: ChatGPT or OpenRouter. Replies stream back; we keep no Chat history. Model and usage checks use the same path. Usage numbers come from your provider, not a Hatbox allowance.
- FeedbackFeedback sends the message you write, plus your email and basic diagnostics only if you include them.
Service limits and records
To keep the service stable, we temporarily use your request IP and an anonymized account identifier. Logs contain only technical request metadata — never IP addresses, credentials, prompts, or replies — and are deleted within 30 days.
Product analytics
Cloudflare Web Analytics runs on page visits to measure page views and real-user page performance. Cloudflare describes this service as privacy-first and says it does not collect or use visitors' personal data. Hatbox's separate PostHog product analytics remains off by default. If you choose Allow in the first prompt or turn it on in Me › Data, Hatbox stores one random anonymous browser ID on this origin and sends a fixed set of coarse usage milestones to PostHog Cloud in the United States. A Silas promotion may include only direct, reddit, x, or other as its source.
For PostHog product analytics, Hatbox never sends Character data, Chat content, prompts, free text, account identifiers, URLs, query strings, referrers, raw source text, raw user-agent strings, or IP fields. PostHog discards the request IP, and Hatbox disables location enrichment and person profiles.
These metrics represent only browsers that opted in, not all visitors or users. They cannot be used to contact you or prove a purchase. Turning analytics off or resetting app data stops future events and removes the anonymous ID and PostHog state from this browser.
Your controls
- Manage your Characters — upload, import, edit, duplicate, or remove Character Cards in Characters.
- Use your own Provider account — connect or disconnect in Me › Connect. Replies use your own account; disconnecting removes its stored session while local content stays.
- Export and keep your Chats — export a full backup of Characters, Personas, and Chats in Me › Data, and restore it later.
- Delete or reset — delete Chats or reset all Hatbox records in Me › Data. Browser site-data controls remove everything stored for hatbox.cc.
Clearing site data can permanently remove local records. Export a backup first.
Hatbox Connect
Hatbox Connect returns a ChatGPT sign-in response only after you confirm the destination. It stores nothing — no tokens, credentials, page content, Chats, or browsing data. OpenRouter authorization does not use the extension.
Data received through Hatbox Connect is used only to relay the sign-in you approved — never for advertising or sale — and is not read by humans except as the Chrome Web Store User Data Policy permits.
Questions and privacy rights
Email support@hatbox.cc with privacy questions or for help removing local data.
Depending on where you live, you may have legal rights over your personal information. Most can be exercised through the controls above — contact us for anything else.
Changes to this policy appear on this page with an updated date.