Privacy policy

WhileAI browser extension and this website. Last updated 9 October 2026.

WhileAI never reads the AI's answers. Your prompts and timings stay in your browser. There is no account and no analytics. Three kinds of network request exist and none carries anything about you. All three are described below, with their exact fields.

What is stored, and where

Everything stays on your own machine, in the browser's extension storage (IndexedDB, chrome.storage.local, and chrome.storage.session for tab ids that are discarded when you close the browser). None of it is transmitted anywhere.

• Response timings. When an answer started and finished, which AI it came from, and whether the tab was visible at the time.
• Time spent, as daily totals. How long you spent writing prompts, waiting, and reading answers, per AI and per day. These are totals, not a log. Writing time is measured from the fact that typing is happening in the message box; the contents of the box are never read, and neither is its length. Reading time counts only while the tab is in front and you have touched something in the last minute.
• The conversation's id. An opaque id taken from the page address, such as c/68a1f3de, so the dashboard can tell you how many follow-ups an answer needed. A readable address, a page title or a search term is never stored.
• Your settings. Which AIs you switched on, whether the chime and notification for each answer are on, how long records are kept, and, if you use the subscription panel, the monthly prices you typed in. Those prices never leave your computer.
• Your prompt text, briefly. It is held only while it is being delivered to the AIs you chose, then deleted. Keeping a history is off by default and is yours to switch on.
• A diagnostic recording, only if you start one. The dashboard has a "Something not working?" switch, off by default. While it is on, WhileAI notes which AI a step failed on and what failed, so you can download the file and send it with a bug report. It records no prompt and no answer text, nothing is sent anywhere on its own, and "Clear" removes it.

The "Answers ready" list

When an answer lands while you are not looking at that tab, WhileAI adds one line to a short list in your browser: which AI it was, the browser tab it is in, how long the answer took, and when it landed. It holds no prompt and no answer text. The list keeps at most the 20 newest lines, and a line is removed when you visit that tab, when the tab closes, when you press Clear, or after 12 hours.

Standard mode on delivery

Some sites remember a slower mode from your last visit (DeepSeek keeps "DeepThink" and "Search" switched on). Before WhileAI sends a prompt to such a site on your behalf it clicks those buttons off, so the prompt goes out in the standard mode. It changes nothing else on the page, and it never does this while you are typing in that site yourself.

What WhileAI never does

• Never reads or stores the AI's responses. It watches only whether an answer is still arriving, so it can time it.
• Never sees, stores or transmits your passwords or login details. You sign in yourself, in your own browser.
• Never solves or bypasses CAPTCHAs or verification checks. When a provider shows one, WhileAI stops and tells you.
• Never sends your prompts, the AI's answers, or your browsing anywhere.

The three times WhileAI uses the network

All three are listed here rather than buried, because "no server at all" would not be strictly true, and a privacy policy that overstates itself is worse than one that explains itself.

• Selector updates. Every few hours WhileAI fetches a small public file describing where the send button and message box are on each AI site. These sites change often, and this is what lets a fix reach you without waiting for a store update. It is a plain download of a public file: no identifier, no prompt, nothing about you.
• A breakage signal, when a site changes (since 0.9.0). The AI sites redesign their pages without warning, and then WhileAI can no longer find the message box or the send button. When its own check sees that, it sends one message a day per site to ahmetaytar.com/whileai/health/ping containing exactly: the site's name (for example deepseek), which part broke (composer, sendButton, userMessage, answer), which backup selector is in use if any (a CSS selector from the public definition file, never text from the page), the definition version and the extension version. Never a prompt, an answer, a page URL or title, an account, a cookie, or any identifier. Sent without credentials; the reply is ignored. It exists so a fix can be written before you have to report the problem. Kept on this site for 14 days as per-site, per-day counts. You can turn it off in the extension's dashboard: Data → "Report when a site changes".
• Checking a licence key, only for someone who bought Pro before October 2026. When you paste a key, WhileAI sends the key and the seller's store id to the payment provider's public validation address (api.polar.sh), and repeats that about once a week so it can notice a cancellation or a refund. The request contains the key and nothing else: no prompt, no measurement, no identifier the extension invented. It never happens while you send a prompt, and if the check cannot be made because you are offline, Pro keeps working. WhileAI is free now and nothing is sold, so for everyone else this request never happens.

Which sites it runs on

Only these five, and no others: chatgpt.com, claude.ai, www.perplexity.ai, gemini.google.com, chat.deepseek.com. On each it reads the message box and the newest message, so it can copy your prompt across and time the reply.

Every permission, and what it is for

Chrome shows these as a list of warnings when you install, without saying what any of them is used for. Here is the whole list, and there is nothing else.

• storage — remembers which AIs you picked, your settings and your timings. All of it stays on your machine.
• alarms — wakes the extension to check whether an answer has finished. Chrome stops an idle extension, so without this a long answer would never be timed.
• notifications — tells you when an answer lands in a tab you are not looking at (one per AI, and one switch turns it off), and when a prompt did not get through to one of your AIs. No notification contains your prompt or an answer.
• tabs — finds the tab for each AI you picked, so your prompt goes to the session you are already using instead of opening a duplicate. It reads the address only, to tell one AI's tab from another's.
• scripting — puts the extension's own script back into an AI tab after the page navigates or Chrome discards it. Without it the extension would quietly stop working in tabs you left open.
• webNavigation — these sites are single-page apps, so switching conversations changes the address without reloading. This is how the extension learns the page changed.
• tabGroups — puts the tabs it opens into one named group, so you can see which tabs are its and close them together.
• offscreen — plays the chime for each answer. An extension's background worker cannot play a sound, so Chrome requires a hidden page while it plays; it is created when needed and closed a few seconds after the last chime.
• The five sites above — the only websites it can touch. It asks for no "read your data on all websites" access, which is why it cannot see your banking, your email, or any other tab.

Two pages the extension opens, and this website

On first install (from version 0.10.1) the extension opens ahmetaytar.com/whileai/welcome/ once, in a new tab, so you see what to do next. On removal Chrome opens ahmetaytar.com/whileai/goodbye/ once; that is a standard Chrome feature every extension may use. The only thing either address carries is the extension's version number. The extension itself sends nothing on either occasion, and never reads either page.

Install and removal counts. When either page loads, it sends one count to this website's own server: "installed" or "removed", the version number, and the country Cloudflare reports for the connection. No cookie, no identifier and no IP address is stored, and each count is deleted after 120 days. Opening the same page again in the same tab is not counted twice. This is the only way I know how many people install and remove WhileAI.

Why it was removed. The goodbye page offers a few reasons to click and an optional note. Nothing is sent unless you click a reason or press Send. A click sends the reason, the note if you wrote one, the version number and your country to this website's server; it reaches me as a message and is deleted after 120 days.

This website (not the extension) may load Google's advertising tag on its pages while an ad campaign is running. Its job is narrow: if you reached the site by clicking an ad and later install, the welcome page lets Google count that install against the ad, so the ads can be judged. It does this with a first-party cookie on ahmetaytar.com (_gcl_aw, at most 90 days) holding an ad-click id. It learns nothing about what you do inside the extension or on the AI sites. In the European Economic Area, the United Kingdom and Switzerland the tag starts with storage switched off, so such visits are not attributed and no consent banner is shown. Apart from that, this site uses Cloudflare Web Analytics, which counts page views without cookies (the page, the referring site, the country and the browser type), and nothing else.

The WhileAI for Teams early-access form

The page ahmetaytar.com/whileai/teams/ has a form for teams who want early access. It is separate from the extension, which sends nothing to it. If you fill it in and press Send, what you typed (your work email, and if you give them your company, team size, what matters most to you, whether you would join a paid pilot, and a note) goes to this website's server together with the country Cloudflare reports. It reaches me as a message, is used only to reply to you about WhileAI for Teams, is never sold or shared, and is deleted after one year. To have it deleted sooner, write to the address at the bottom of this page.

Your data is yours

The dashboard can export everything as JSON or CSV on every plan, import it on another computer, and delete everything at once. Removing the extension removes its storage with it.

Payments

Since version 0.11.0 (October 2026) WhileAI is free for everyone, with every feature, and nothing is sold. Earlier versions sold Pro through Polar Software Inc. as merchant of record; Polar held the payment details under its own privacy policy. The terms of sale and the refund policy stay online for anyone who bought before.

Children

WhileAI is not directed at children under 13. The extension collects nothing from anyone, of any age.

Changes

If this policy changes, the date at the top changes with it, and the previous text is kept and available on request.

Contact

aytarahmetyasin@gmail.com