Legal document

Privacy policy

Applies to the donotfeedai.com website (and donotfeedai.pl and donotfeedai.eu), the Do Not Feed AI browser extension and the Do Not Feed AI program on your computer (companion). Last updated: October 26, 2026.

This is an English translation provided for convenience. The binding version is the Polish version (Polityka prywatności).

1. Controller

The data controller is Sebastian Obara It&Consulting - an entrepreneur running a business in Poland.
NIP (tax ID) 6762237689, REGON 120890179
Address: ul. Skośna 7, 30-383 Kraków, Poland
Contact: [email protected]

2. Website

• The website does not use cookies or any other identifiers stored in the browser.
• The website contains no analytics tools, tracking pixels, ads or third-party scripts.
• The website has one contact form, described in section 4; apart from it, the website does not collect any data. The demo on the home page runs entirely in your browser: text typed into the demo field is not sent anywhere.
• The website does not load anything from other domains: the fonts are hosted together with the website, and the content security policy (CSP) allows connections only to our own domain (on the home page: sending the form to /api/kontakt), not to other domains.
• The server hosting the website may keep standard technical logs (IP address, time, requested address) to ensure the security and operation of the service.
• Traffic to the website passes through the Cloudflare network (Cloudflare, Inc., USA), which protects the website from attacks and speeds up its loading. In doing so, Cloudflare processes technical connection data, including the IP address, as a processor, on the basis of the controller's legitimate interest (Art. 6(1)(f) GDPR: security and operation of the website). Data is transferred to the USA on the basis of a European Commission decision finding an adequate level of protection (EU-U.S. Data Privacy Framework), in which Cloudflare participates. Cloudflare may also ask the browser to report failed connections to the website (the NEL header); such a report goes to Cloudflare.
• Downloadable files (installers and the extension) are provided on GitHub (GitHub, Inc., USA). The download button leads to GitHub, which processes technical connection data under its own terms (GitHub privacy statement).

3. Extension and program

• Do Not Feed AI works locally. It does not send data to the vendor, collect statistics or track user activity. It needs no account and no server connection to verify the license. There is no telemetry, usage statistics, user accounts or online license checking.
• The only connection the extension makes to our website is the optional version check: only after you click "check for updates" in the extension panel, a static updates.json file is downloaded from this website - with no parameters, no version number and no identifiers of any kind, and the versions are compared in your browser. The extension does not check the version periodically or in the background. Our hosting may keep standard technical logs of this request (IP address, time, requested address).
• Links in the extension panel (e.g. to the license page) and the page offered at the end of the Windows installation (donotfeedai.com/start) open in the browser only after you click them or leave the option checked in the installer. This is an ordinary visit to this website, described in section 2; the extension and the program do not send anything in the process.
• The extension only has permissions for the browser's local storage (storage), the browser's side panel (sidePanel), communication with the program on your computer (nativeMessaging) and the chat pages it works on (chatgpt.com, chat.openai.com, claude.ai, gemini.google.com, copilot.microsoft.com, copilot.com). The program contains no networking library.
• Data detection and replacement take place on your device, in the Do Not Feed AI program; the extension passes text and files to it over the browser's local connection with the program. In the content sent to the AI service you use, the detected data is replaced with replacements generated locally, and the map of originals stays on your device. Detection is rule-based and may not recognize all data; anything the program did not detect reaches the AI service unchanged. The provider of the AI service is responsible for processing the content sent to it, under its own terms.
• The replacement map is stored only in the program on your computer, in memory, separately for each chat tab; the browser does not store it. The map is deleted together with the tab. In case the connection between the extension and the program drops, the program saves an encrypted copy of the map of the open tab (XChaCha20-Poly1305), with the key in the system keychain (Keychain on macOS, Credential Manager on Windows); when the keychain is unavailable, the key is kept in a file in the program's data folder, accessible only to your account. The copy contains no passwords or API keys and is deleted when the tab is closed, when the browser restarts, and after 24 hours at the latest. Tabs in incognito mode are never saved to disk.
• The program does not save working copies of files: a file from the chat is processed in memory.
• Clipboard shortcuts (an optional feature of the program, off by default and turned on by you): the program reads the system clipboard only after you press a shortcut or pick a command in the icon's menu. The text is processed locally, in the program's memory, and the clipboard replacement map is kept only in memory and disappears after 24 hours without use (also after "New session" and when the program closes). Nothing is sent. The original that was copied before you used the shortcut may remain in the system clipboard history (for example Win+V) or in a clipboard manager: those are settings of your system that we do not control.
• Files from the program menu (an optional feature that you start): the result with an _anon ending is created next to the original, which stays unchanged. The restore map is stored only locally, in the program's data folder, in encrypted form, and kept for 30 days; the key lives only in the system credential store (Keychain on macOS, Credential Manager with DPAPI on Windows). Nothing is sent.
• The program processes a PDF only if it has a text layer and saves the result as a docx or txt, without page layout and graphics; scans are rejected because the program has no OCR. From jpg and png images it removes only the metadata (for example location, device, author): the content of the image is not masked. All of this happens locally on your computer.
• The program keeps a local log of technical events on your computer, used only to explain support requests (for example, "the program did not mask something"). The log contains: when the program started and stopped, the license state (tier and status, without the organization name), settings received from the extension (for example the mode and the number of custom phrases), numbers of operations broken down by kind of data (for example "2 e-mail addresses, 1 PESEL"), the type and size of processed files, and error or refusal codes. The log does not contain message content, detected values, names of people or companies, users' custom phrases, file names or file paths. The data in the log stays on your device and is not sent anywhere. The log files (logs/ in the program's data folder) are accessible only to your account and protected against unnoticed changes (a hash chain, a signature with a key from the system keychain). They are kept for up to 180 days of the program's use, and longer if you use it rarely, and are deleted automatically. Giving us the log is voluntary: we receive it only if you send it with a support request yourself, or if we ask for it and you agree. The log works regardless of the license tier and has no off switch in the extension panel.
• The program stores a short end-of-log marker in the system credential store (Keychain on macOS, Credential Manager on Windows): a number, a hash and a signature, with no content, which makes it possible to detect that the log was deleted or rolled back. The marker is not sent anywhere and disappears together with the program when it is uninstalled with its data removed.
• The license file contains the organization name, tier, number of seats, dates, in the Business version also the company dictionary, and a digital signature; it is checked locally and is not sent anywhere. To protect against the clock being turned back, the program locally stores the date of first launch and the last date seen; these are not sent anywhere either.

4. Contact form and e-mail contact

What data we process. When you fill in the form on the home page or write to the contact address, we process: your name, e-mail address, the content of the message (up to 1200 characters in the form) and the purpose of contact (trial license, deployment in a company, other). If you give them: the company name, phone number and your answer to "How did you hear about us?". We also record whether you ticked the voluntary consent to news, the language of the page the form was sent from, and the time of the submission. When the form is sent, the server also measures the time from page load to sending (protection against bots).

Why and on what basis.

• Replying to your message, preparing and sending a trial license or an offer, and a phone call at your request: Art. 6(1)(b) GDPR (steps taken at the request of the data subject before entering into a contract).
• Handling correspondence, protection against abuse (spam, flooding the mailbox) and establishing or defending claims: Art. 6(1)(f) GDPR (the controller's legitimate interest).
• News about the product: only if you tick the voluntary checkbox, on the basis of your consent (Art. 6(1)(a) GDPR). The box is not ticked by default, and you can withdraw your consent at any time by writing to the contact address; withdrawal does not affect the lawfulness of earlier processing.

Voluntary nature. Giving your name and e-mail address is voluntary, but without them we cannot reply. The company, phone, message and the source you heard about us from are optional. Please do not put client data or passwords in the message.

Who receives the data. The message from the form reaches the mailbox [email protected] by e-mail, on the controller's own mail server; we do not use external mail providers. The form service does not save submissions in a database or on disk. Traffic to the website, including the form content in transit, passes through the Cloudflare network, as described in section 2 (transfer to the USA on the basis of a European Commission adequacy decision, EU-U.S. Data Privacy Framework). We do not pass the form data to any other recipients, we do not sell it and we do not use it for advertising. The form uses no external services (no form services, no CAPTCHA-type protection, no analytics).

For how long. Messages that did not lead to a contract are kept for up to 12 months after the contact ends and then deleted. If a contract is concluded, we keep the correspondence and documents for the period required by law (including tax law) and until claims become time-barred. Consent to news is kept until it is withdrawn.

IP address and logs. The form service uses your IP address only briefly, in the server's memory, to protect against abuse (submission limits, for 24 hours at most); it does not write it to its own logs, to disk or to the message. Independently of the form, visitors' IP addresses are processed by the web server and Cloudflare (standard technical logs, including an error log in which the IP address may appear, for example when the form service fails); this is described in section 2.

Spam protection and what we do not do. The form has a hidden trap field, measures the time from page load to sending, and limits the number of submissions from one IP address; this serves only to reject automated submissions. The website and the form use no cookies or other identifiers stored in the browser, and have no analytics, pixels or third-party scripts. We do not profile visitors and do not make automated decisions about them. We do not send an automatic confirmation to the address you give: you see the confirmation on screen after sending.

If the form does not work or you prefer e-mail, write directly to [email protected]; the same scope of data and the same rules then apply to ordinary mail (e-mail address, name and the content of the message).

5. Your rights

With regard to the data we process (in practice: correspondence and form submissions), you have the right to access your data, to rectification, erasure, restriction of processing, to data portability (for data processed on the basis of consent or a contract), to object to processing based on a legitimate interest, to withdraw consent at any time, and to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, Poland; ul. Stawki 2, 00-193 Warszawa). For data matters write to [email protected]. Because the extension and the companion do not pass any data to us, we have no access to anything you process with them, and we can neither read nor delete it: this data is entirely under your control on your device.

6. Changes

Changes to this policy will be published on this page with a new update date.