Your Google account email, and an encrypted copy of your API key if you provide one. The text you Alt+Click is sent to the AI provider to generate a response and immediately discarded — we never store it.
We do not track the websites you visit, store your browsing history, read page content beyond what you select, or sell your data to anyone.
If you add your own API key, it is encrypted with AES-256-GCM before storage. We cannot read your plaintext key. It is decrypted only in memory at the moment it is used, then released. You can delete it at any time from the extension options.
Gutter uses Supabase for authentication, Vercel for hosting, and your chosen AI provider (Gemini, OpenAI, Claude, or Grok) to generate responses. Each operates under their own privacy policy.
Remove your API key anytime via extension options. To delete your account entirely, email us and we'll remove all records within 7 days.