Privacy
Privacy policy
Last updated: October 8, 2026
The short version
- Your settings and decision log stay in your browser. The extension has no analytics, telemetry or ads.
- Most requests are decided on your device. Only requests nothing local can classify are described to a model for a verdict.
- On Free, that description goes to the AI provider you choose, with your own key. We receive nothing.
- On Pro, it goes to our service, which never stores the request content and never uses it for training.
This policy covers the onlyread browser extension, the onlyread Pro service and this website. onlyread lets AI agents read the websites you choose while it stops requests that would change something, such as sending, posting or deleting.
1. The extension
What stays on your device
Stored in the extension’s local storage and never sent anywhere by the extension:
- your settings (guarded sites, mode, appearance) and, on Free, your model API key;
- a log of the most recent 2,000 decisions on guarded sites (method, URL, verdict and reason);
- a verdict cache keyed by request shape;
- the last few interface actions in a guarded tab, for example “click on a button named Send”.
Rules, per-site decoders and the verdict cache settle most requests locally, so they never leave your device.
What is sent for a verdict
Only for a request on a site you guard that nothing local can classify, the extension sends a description of that one request:
- the method, host, path and path template, and the names (not the values) of query parameters;
- the content type, the structure of the body, and a preview of the body limited to 2 KB, with long text values shortened;
- the last interface action that triggered it (its type, the element and its visible name).
Never sent: cookies, request headers, page content, responses, your browsing on sites you did not guard, or passwords you type. The body preview can contain personal data from the page you are on, for example an email subject or a search term.
Where the description goes depends on your plan:
- Free (your own key): only to the AI provider you configure, under that provider’s terms. The makers of onlyread receive nothing.
- Pro: to the onlyread Pro service, described in section 2. Nothing is sent to it unless you sign in to it.
2. The Pro service
Account
Your email address and an account identifier, used to sign you in and manage your subscription. Sign-in is handled by Clerk. Kept while your account exists.
Payments
Paddle is our merchant of record and handles checkout, billing and tax. We never see or store your card details. We keep your subscription status and plan as Paddle reports them. Paddle keeps its own invoice records, as tax law requires, under its own privacy policy.
Verdict requests
- No retention of request content. The body preview, path and interface action are held in memory only while your request is being judged. They are never written to our database, logs or backups.
- What we keep: your account identifier, a timestamp, the request’s shape fingerprint, the verdict, the model used and the response time, plus a monthly usage count. A fingerprint describes the shape of a request, such as
POST mail.google.com/sync/…, and contains no values from it. We use these for usage limits, billing, abuse prevention and service quality. We delete them after 30 days, and the monthly usage count after two months. - Shared verdicts. When a request shape is confirmed as a read or a write, its fingerprint and verdict may be added to a cache shared by all users, so it does not need to be judged again. The shared cache holds fingerprints and verdicts only, never request content or who sent it.
- No training. Your requests are not used to train or fine-tune any model, by us or by our providers.
Service providers
| Provider | Purpose | Data |
|---|---|---|
| OpenRouter, and the model vendors it routes to | Judging requests nothing local could classify | The request description above, not retained for training |
| Paddle | Checkout, subscriptions and tax (merchant of record) | Email, billing details |
| Clerk | Sign-in | Email, account identifier |
| Vercel | Running the service | Requests in transit, service logs without request content |
| Neon | Database | Account, usage and verdict records described above |
Deleting your account
You can delete your account yourself from your account page at any time. Deletion is immediate: any active subscription is cancelled, and your account, sign-in, usage and verdict records are removed. Paddle keeps the invoice records it must keep by law.
3. This website
This website sets no cookies and runs no analytics or advertising. Fonts are loaded from Google Fonts. The example posts in the demo are embedded from X, Reddit, Instagram, TikTok and YouTube: the X post loads with the page, the others only when you open their tabs, and those platforms’ own privacy policies apply to them. If you use the contact form, your message is delivered to us through Formspree and used only to reply to you.
4. Your choices and rights
You can switch plans, choose which sites are guarded, or turn onlyread off at any time in the extension’s options. Removing the extension deletes everything stored on your device. You can ask us for a copy of your Pro account data, or ask us to correct or delete it, using the contact details below.
5. Changes
If we change this policy, we will update the date at the top. If a change affects what we collect or how we use it, we will say so in the extension before it takes effect.
6. Contact
onlyread is operated by OnlyRead AI. Questions or requests about your data: privacy@onlyread.ai. Everything else: support@onlyread.ai.