Your media stays local.

Scope

This policy applies to the GoPaste Chrome extension, named “GoPaste — Library & CodeChum”. It has two features: (1) a local library for images and GIFs you choose to save, and (2) an optional CodeChum assistant that requires a member account and your own Gemini API key. GoPaste has no advertising, analytics, or tracking, and operates no media server.

Data GoPaste handles

Image and GIF library. When you choose “Save to GoPaste”, GoPaste handles the selected media bytes, the media source URL, and the URL of the page where you selected it. These URLs may themselves contain personal information. The library also holds titles, file details, categories, favorites, locally calculated duplicate information, and copy or drag usage counts. Dashboard preferences and imported ZIP backup contents are handled when you use those features.

CodeChum account. Your email address and password (used only to sign in), a session token, and your account's access status.

CodeChum assistance. When you ask for help on a CodeChum tab: the challenge description, programming language, selected visible test inputs and expected outputs, requirements, candidate code, optional implementation notes, and check feedback.

Credentials and settings. Your own Gemini API key, your AI-consent choice, and CodeChum settings. GoPaste does not scan unrelated pages for CodeChum problems and does not build a browsing-history log.

How the data is used

Library data is used only to save, organize, search, preview, copy, drag, attach, export, import, and delete the media you choose, and to calculate local storage and duplicate information. If a selected image cannot be retrieved directly, GoPaste may read it from its source page solely to recover that image. Account data is used only to sign you in and confirm your access to CodeChum assistance. Challenge data is used only to prepare a candidate solution and revise it after you manually check the result. Data is not used for advertising, profiling, creditworthiness, lending, or any unrelated purpose, and is never sold.

Storage and retention

On your device. Saved media, URLs, metadata, categories, preferences, and usage counts are stored in your Chrome profile in IndexedDB. CodeChum settings, optional implementation notes, your Gemini API key, your session token, and paused solver state are stored in Chrome extension storage. Your password is never stored by the extension. Library entries remain until you delete them or remove the extension. Signing out removes the local CodeChum session and credentials; implementation notes are also removed when you change accounts. Your Gemini key and AI consent stay until you remove or revoke them. A ZIP backup exists wherever you choose to save it.

With third parties. Only the account and AI data described in the next two sections leaves your device, over encrypted HTTPS connections. The GoPaste developer does not receive or keep copies of your library, API key, or challenge content.

Supabase: CodeChum sign-in and access

CodeChum assistance requires a member account. When you sign in, your email and password are sent over HTTPS to the Supabase authentication service, which verifies them and returns a session token. The extension stores that token locally, not your password, and checks your account's access status with Supabase when you use CodeChum. Supabase processes and stores your member record under its own privacy policy: supabase.com/privacy. Nothing from your saved image library is sent to Supabase.

Google Gemini: CodeChum AI requests

Only after you affirmatively enable CodeChum AI assistance and start a solver run does the extension send the current challenge description, language, selected visible test inputs and expected outputs, requirements, candidate code, optional implementation notes, and later check feedback to Google's Gemini API over HTTPS. Your own Gemini API key authorizes the request and is sent only to Google for this purpose. Google handles that content under its own terms: policies.google.com/privacy. Generated code is placed in the CodeChum editor; you choose when to check it. No saved GoPaste image or GIF is ever included. You can turn off AI assistance at any time on the CodeChum page.

Sharing and network requests

Your data is shared only with Supabase (sign-in and access status) and Google Gemini (AI requests), and only when you use the CodeChum assistant. To save a selected image, Chrome requests it from the source website, which can receive the request and handle it under its own policy. If the website rejects a request with an authorization error, GoPaste may retry that same selected media URL using your existing browser session. When you choose to copy, paste, drag, attach, or download an item, the destination website or app you select may receive the media and, for a URL fallback, its source URL. You choose when to export a ZIP backup and where to save it. We do not sell or rent user data and do not disclose it to anyone else, except where required by law.

Why Chrome permissions are needed

Context menus add “Save to GoPaste”. Website access retrieves selected media and supports user-initiated attachment. Scripting and page capture recover selected media when direct fetching fails. Clipboard access copies media. Downloads create files and backups you request. Unlimited storage holds your local library. Extension storage keeps the CodeChum session, settings, and checkpoints. Scripting also reads the challenge and enters generated code on CodeChum pages only, and only when you select a problem and use its controls. The content script is available on websites so you can attach saved media to compatible pages.

Limited Use disclosure

The use of information received from Chrome APIs adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements. User data is used only to provide the features described here. It is not sold, not transferred to third parties except as described above or as necessary to comply with law, not used or transferred for advertising or to determine creditworthiness or lending eligibility, and not read by humans except with your consent, for security purposes, or to comply with law.

Your controls and deletion

You can delete individual or selected library items, export a ZIP backup, sign out of CodeChum, revoke AI assistance, remove your local Gemini key, and remove all extension data through Chrome's extension settings. Deleting local GoPaste data does not delete copies you previously downloaded, exported, pasted, or shared with another website or app; contact the destination directly about those. To request access to, correction of, or deletion of your Supabase member record, email olegnatruk@gmail.com; requests are handled within 30 days.

Security and handling

GoPaste packages its executable code with the extension, uses HTTPS for all network requests to Supabase and Google, and keeps library processing in the browser. It validates imported archives and media before adding them to the library. Protection of locally stored data also depends on the security of your device and Chrome profile. Exported ZIP files are under your control, so store and share them carefully.

Children, policy changes, and contact

GoPaste is not directed to children under 13 and does not knowingly collect their personal information. If the extension's data practices change, this page will be updated with a new date and the Chrome Web Store disclosures will be revised to match. For questions about this policy or GoPaste data handling, email olegnatruk@gmail.com.