Chrome Extensions Privacy Policy

This page covers privacy for browser extensions published by Alberuni Azad. It has two parts: a general section that applies to every extension published here, and a section specific to each individual extension. If you only care about one extension, read the general section plus that extension's own section below it.

This policy is separate from the privacy policy for Shopify apps published by Alberuni Azad, since browser extensions and Shopify apps handle data very differently.

The following is true of every browser extension published by Alberuni Azad, unless that extension's own section below says otherwise:

• No account, sign-up, or login is required. Extensions use the browser sessions you already have open, on sites you've already logged into yourself.
• No backend server. These extensions do not have a server of their own, and do not send your data to one, because none exists.
• No data is sold, shared, or transmitted to any third party.
• Any settings or content an extension needs to remember are stored locally on your device using the browser's own storage APIs (such as chrome.storage.local). This data never leaves your device, and uninstalling the extension removes it.
• No extension published here collects analytics, tracking, or telemetry of any kind, unless explicitly stated otherwise in that extension's own section.
• No extension reads your browsing history, passwords, or account credentials.

Questions about this policy or any specific extension can be raised by emailing [email protected] or via helloalberuni.com.

Social Cross-Poster is a browser extension that helps you write one post and send it into your own Facebook, X (Twitter), LinkedIn, Bluesky and UpScrolled tabs. Everything in the "General" section above applies to it, with two exceptions noted under "If you buy Pro" and "If you use the AI writing helper" below. This section adds the details specific to how it works.

What it stores

The extension saves your posts and a small amount of settings data locally on your device, using the browser's chrome.storage.local API:

• Which sites (Facebook, X, LinkedIn, Bluesky, UpScrolled) are currently ticked in the picker, so your choice is remembered the next time you open the extension.
• Which sites you have turned off under "Your sites" in Settings, and whether you have closed the tip that points to that setting.
• Your saved posts: their text, any per-platform customizations, the sites chosen, whether each was sent, and any image you attached. This is what lets you keep several posts and post them later. Images are kept in the browser's own local database (IndexedDB) and are only ever sent to the site you post to. Saved templates and reminder times are stored the same way.
• Which reminders have already been shown, so each one is shown once.
• Whether debug logging is switched on (off by default).
• If you turn on the optional AI writing helper: whether it's on, which AI service you picked, your API key for that service, any model override, and your two chosen languages. Your API key is never included in Backup files.

If you use Backup in Settings, the extension creates a file on your own computer through a normal browser download. It is never uploaded anywhere, and you choose where to keep it.

None of this leaves your device except as described under "If you use the AI writing helper" below. It is never transmitted anywhere else, and uninstalling the extension removes it.

If you buy Pro

Social Cross-Poster is free to use. There is an optional paid Pro upgrade. This is the one place where the "no third parties" point in the General section above does not apply, so it is spelled out in full here.

• Buying happens outside the extension. The buy buttons open a checkout page hosted by Freemius in a normal browser tab. Your name, email and card details are entered there, on Freemius's own page, and never pass through this extension. Freemius is the seller of record and handles payment, tax, invoices and refunds. Their privacy policy applies to that purchase: freemius.com/privacy
• Activation. After buying you paste your licence key into the extension. The extension sends that key, plus a random identifier it generates for your browser, to api.freemius.com so Freemius can confirm the key is real. No post, template, image, email address or name is sent with it.
• A daily re-check. Once a day the extension asks Freemius whether that licence is still valid, sending the same licence key and random identifier and nothing else. This is how a cancelled subscription stops being Pro. It only runs if you have activated a licence.
• If you never buy Pro, none of this happens. The extension makes no network requests of its own at all.
• Your work is never held hostage. If a licence ends or you deactivate it, every post, template and image you have written stays exactly where it is. You simply cannot add new ones past the free limits.

If you use the AI writing helper

The extension has an optional, off-by-default "AI writing helper" that can translate or rewrite your post using your own AI account (Gemini, Mistral, OpenRouter or ChatGPT). This is the other place where the "no third parties" point in the General section above does not apply, so it is spelled out in full here.

• Off unless you turn it on. If you never open Settings and turn this on, none of the below applies and the extension makes no request to any AI service.
• You bring your own account and key. The extension does not provide, sell or proxy access to any AI service. You get your own API key directly from Gemini, Mistral, OpenRouter or ChatGPT (OpenAI) and paste it into Settings.
• What's sent, and to whom. Only when you press an AI button in the editor (a quick "Translate to…" button, or your own typed request), your request plus the post you're editing (or just the part you selected, along with the full post for context) is sent directly from your browser to the AI service you chose, using your own key. Nothing is sent automatically or in the background.
• Nothing changes in your post automatically. The AI's reply is shown in a side panel for you to read. It only goes into your post if you press "Replace post", "Replace selection", "Add below" or "Use this draft" yourself, and pressing Ctrl+Z (⌘+Z on a Mac) right after undoes it.
• Your key stays on this device. It is stored locally the same way your other settings are, is never included in a Backup file, and is never sent anywhere except the one AI service you chose it for.
• The AI provider's own policy applies to that request. Once your post text reaches Gemini, Mistral, OpenRouter (and the model provider it routes to) or OpenAI, their own privacy policy and terms govern what happens to it there. This extension has no visibility into and no control over that.

What it does not do

• It does not read your browsing history.
• It does not read or store the content of any tab other than the Facebook, X, LinkedIn, Bluesky or UpScrolled tab it is actively posting to.
• It does not access your passwords or account credentials. It relies entirely on you already being logged in through your normal browser session.
• It does not automatically click "Post" on your behalf. Every platform is filled in as a draft in that site's own composer and left for you to review and publish yourself.
• It does not collect analytics, usage statistics, or crash reports.

Permissions this extension uses, and why

Permission	What it's for
tabs	To open a new tab on facebook.com, x.com/twitter.com, linkedin.com, bsky.app or upscrolled.com so the post can be typed into that site's own composer, to bring each one to the front while typing, and to close them afterwards. It is also used once to check whether this extension's own composer tab is already open, so a second copy is not opened; that check looks at the addresses of your open tabs and ignores every one that is not this extension's own page. Nothing about your tabs is stored or sent anywhere.
storage	To remember your platform picker, the sites you have turned off, saved posts, templates, reminders, and debug-mode setting locally, as described above.
alarms	To wake the extension at the time you chose for a post reminder, so it can open that post for you. It is used for nothing else and Chrome shows no warning for it.
Host access to facebook.com, x.com, twitter.com, linkedin.com, bsky.app, upscrolled.com	Required to open, read the composer state of, and type into the post-creation UI on these five sites. This is the entire purpose of the extension.
Host access to api.freemius.com	Used only to check a Pro licence key, as described in "If you buy Pro" above. Never contacted by anyone on the free plan.
Optional host access to generativelanguage.googleapis.com, api.mistral.ai, openrouter.ai and api.openai.com	Only requested, and only granted, the moment you turn on the AI writing helper and press "Test connection" for Gemini, Mistral, OpenRouter or ChatGPT. Used solely to send your post text and your own API key to the AI service you chose, as described in "If you use the AI writing helper" above. Never requested or contacted if you don't turn this feature on.

Third parties

This extension does not integrate with any ad network or analytics provider, and there is no tracking of any kind. The only parties that ever see content you type are the social media platforms you explicitly choose to post to, and only the content you asked to be posted there.

A second third party is Freemius, which processes payments and licences for the optional Pro upgrade, and which only ever receives a licence key from someone who has bought one. Nothing you write is ever sent to them.

A third, only if you turn on and configure the optional AI writing helper, is the one AI service (Gemini, Mistral, OpenRouter or ChatGPT) you chose, which receives your post text and your own API key only when you press an AI button, as described above.

Children's privacy

This extension is not directed at children and does not knowingly collect any information from anyone, regardless of age, since it does not collect information at all beyond the local settings described above.

Changes to this policy

If this policy changes, the "Last updated" date at the top of this page will change accordingly. Continued use of an extension after an update constitutes acceptance of the revised policy.

Contact

Alberuni Azad
[email protected]
helloalberuni.com