Last updated: April 1, 2026
autopilot ("we", "us") is a browser extension and related services. This policy explains what data we collect, why, and your rights regarding it.
autopilot operates in two modes. What data we handle depends on which mode you use.
In local mode, everything stays on your device. URLs are processed locally to determine routing. Rules are stored in a JSON file on your machine (~/.local/share/autopilot/config.json). No data is transmitted to any server. No analytics, tracking, or third-party services are used. We do not collect any personal data in local mode.
Data we collect and why
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Name, email, Google account ID | Authentication and account management | Contract necessity |
| Browser profile names and browser type | Core feature: routing links to the right profile | Contract necessity |
| Routing rules (domains, keywords) | Core feature: syncing rules across browsers | Contract necessity |
| Stripe customer ID, subscription ID, plan, billing period | Payment processing and subscription management | Contract necessity |
| URLs (in transit only) | Real-time routing between browser instances | Contract necessity |
URLs transmitted through our relay server for cross-browser routing are never logged, stored, or analyzed. They exist only in memory for the instant needed to deliver them to your other browser.
We use the following services to operate autopilot in cloud mode:
We do not sell your data. We do not use analytics or tracking on our website or extension. We do not share your information with any parties beyond those listed above.
Our server is hosted in the United States via Fly.io. If you are located in the European Union or European Economic Area, your data is transferred to the US for processing. Our service providers (Fly.io, Stripe, Google) are certified under the EU-US Data Privacy Framework, which provides an adequate level of data protection as recognized by the European Commission.
We keep your data for as long as your account exists. If you request account deletion, we delete all your data (account, profiles, rules, subscription records) within 30 days. Stripe may retain billing records independently as required by financial regulations.
Our server generates operational logs that may include IP addresses and internal user identifiers. These logs are stored by our hosting provider (Fly.io) and are used solely for debugging and abuse prevention. They are not combined with other data or shared with third parties.
Our website does not use cookies or tracking technologies. The browser extension uses chrome.storage (local to your browser) to store session data — this is not a cookie and is not accessible to websites.
Depending on your location, you may have the following rights regarding your personal data:
To exercise any of these rights, email us at dante142@gmail.com. We will respond within 30 days.
If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection supervisory authority.
autopilot is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child under 16 has provided us with personal data, please contact us and we will delete it.
We do not use automated decision-making or profiling.
We may update this policy from time to time. The "last updated" date at the top will reflect the most recent revision. Continued use of autopilot after changes constitutes acceptance of the updated policy.
For any privacy-related questions or requests:
Email: dante142@gmail.com
GitHub: github.com/dantemoon1/autopilot