STRETCH ยท PRIVACY
Privacy notice
Stretch is an open-source Chrome extension maintained by soupdiver. It shortens selected or eligible page prose when you activate it. This notice applies to the extension and its project website.
Effective date: 15 October 2026. For support or privacy questions, email stretch@rainbowfab.org. You can also report bugs through Stretch GitHub Issues once the repository is published. Never send API keys, and do not include private page text or other sensitive information in a public issue.
What is sent and when
Only after explicit activation and consent, the extension sends eligible source text and the selected model request to the provider you configured: Anthropic, OpenAI, or OpenRouter. Requests include the provider API credential and, for Anthropic where configured, workspace identifier. The provider receives ordinary connection metadata such as your IP address. OpenRouter may transmit prompts to the downstream model provider selected by its service. Provider and downstream retention, processing, and training terms are governed by their policies; Stretch cannot promise zero retention.
Connection tests send a small fixed synthetic request and may incur a charge. Model discovery sends an authenticated catalog request but no page text. Both are initiated by you.
Storage and access
API keys, model preferences, and your website-text consent are stored in Chrome's local extension storage. The storage is not encrypted by Stretch and is not synced by the extension. Credentials are restricted to trusted extension contexts, not exposed to websites. Original page nodes and text are retained in the active tab's memory to support restoration; they are not sent back to a Stretch-operated server.
Use and sharing
Stretch has no developer-operated backend, analytics, or advertising. Page text and authentication information are used only to provide the user-requested shortening through the selected provider. They are not sold or used for advertising or unrelated purposes. This is the extension's Limited Use commitment under the Chrome Web Store Limited Use requirements.
Your choices and limitations
Revoke consent in extension settings to prevent future page requests. Revoking consent does not remove saved credentials. Remove a credential in settings and separately revoke it with the provider; uninstalling removes extension-local data according to Chrome behavior. Stretch cannot delete provider-side records. Avoid sending sensitive content unless you have reviewed the relevant provider terms. AI shortening can omit or distort meaning; verify against the original.
Stretch processes eligible visible prose only. It does not traverse cross-origin frames, PDFs, canvas, or closed shadow roots; controls, code, tables, and unsupported selections are skipped.
Provider policies
Project website and support
The planned project website is hosted with GitHub Pages. GitHub may process visitor connection information, including IP addresses, to provide and secure hosting. GitHub also processes account information and any content you choose to submit through Issues under its privacy statement. The website does not request your provider API key and includes no analytics or advertising scripts.