Privacy Policy
CLIPKEY · Effective September 15, 2026
This policy applies to the CLIPKEY Chrome extension and web preview. We do not operate an account server or a cloud service that stores your clips.
Local storage
-
Clips, titles, URLs, text, compressed screenshots, media references, and model-generated results are stored
in
chrome.storage.local. -
Your AI base URL, model name, API key, language, and theme preference stay local. The web preview uses
localStorage. - Uninstalling the extension or clearing preview-site data removes the corresponding local copy.
Your AI endpoint and video parsing
Only when you choose “Extract key points” does CLIPKEY send the current clip's selected text, note, images, and parsed video-page information to your configured OpenAI-compatible endpoint. For YouTube, Bilibili, or Vimeo it may read page titles, descriptions, available captions, and an official thumbnail; it never uploads a video file. If no thumbnail is available, it may request a clearly labelled generated image from that endpoint.
Requests include your API key. We do not operate a relay or store that key; the endpoint provider's policy governs its handling.
Knowledge base, embedding model, and downloads
- Knowledge-base search runs entirely on your device: clips are split into chunks, embedded locally, and matched against your question with hybrid retrieval (keyword search plus on-device vector search). No clip content is uploaded for this.
- When the extension loads, ClipKey automatically downloads the embedding model files (about 23 MB) from the model repository (HuggingFace) and caches them on your device so later use works offline. That download retrieves model files only and never sends your clips. The model is not bundled inside the extension.
- The resulting vectors are derived data stored locally, and they are not synced to Google Drive and not sent anywhere.
- Excerpts are sent to the AI endpoint described above only when you explicitly use “Extract key points” or “Ask your knowledge base”.
- The knowledge-pack export is generated entirely on your device and is never uploaded by ClipKey.
Google sign-in and Drive
- The extension uses
chrome.identity; preview uses Google Identity Services. -
Drive
applicationDataFolderand email are requested to display the signed-in account and sync to your Google account's hidden app-data folder. - Synced data includes clip metadata and compressed image blobs, never API keys.
- Sign-out first asks you to sync. You can keep local clips (default), or after successful sync delete local clips and image blobs. Settings and API keys remain; neither choice deletes Google app data. A failed sync never clears local clips.
Export, feedback, deletion, and limits
- Agent exports are generated locally. Offline ZIP backup code is retained but its entry is hidden by default.
- Feedback opens your mail client. Clips, images, and API keys are never attached automatically; you choose what to send.
- Moving a clip to Trash keeps its local record and attachments for recovery. This version has no permanent-delete control.
- We do not sell data, do cross-site ad tracking, create email/password accounts, or upload clips or API keys to a CLIPKEY-owned server.
Contact
For privacy questions, email ybl20200126@gmail.com.
本政策适用于 ClipKey Chrome 扩展和网页预览。开发者不运营账号服务器，也不运营存放你剪藏内容的云服务。
本机存储
- 剪藏、标题、网址、正文、压缩截图、媒体引用和模型生成结果存于
chrome.storage.local。 - AI Base URL、模型名、API Key、显示语言和主题偏好也仅存本机；网页预览使用
localStorage。 - 卸载扩展或清除预览站点数据会删除对应的本机副本。
你自己的 AI 接口与视频解析
你选择「提炼关键点」时，ClipKey 才会将当前剪藏的选中文字、手记、图片和已解析的视频页面资料发送到你填写的 OpenAI 兼容地址。对 YouTube、B 站和 Vimeo 链接，可能读取页面标题、简介、可用字幕和官方封面；不会上传视频文件。没有封面时，可能向同一接口请求明确标注的生成图。
请求会带上你的 API Key。开发者不运营中转服务器，也不保存该 Key；接口提供方如何处理请求，以其隐私政策为准。
知识库、嵌入模型与下载
- 知识库检索完全在本机完成：剪藏被切成片段、在本机生成向量，再用混合检索（字面检索 + 本机向量检索）与你的问题比对。这个过程不上传任何剪藏内容。
- 扩展加载后，ClipKey 会自动从模型仓库（HuggingFace）下载嵌入模型文件（约 23 MB）并缓存到本机，之后离线可用。该下载只获取模型文件，不会发送你的剪藏。模型不打包在扩展里。
- 生成出来的向量属于派生数据，只存在本机，不会同步到 Google Drive，也不会发送到任何地方。
- 只有你明确点击「提炼关键点」或「问知识库」时，命中的片段才会发送给上文所述的你自己配置的 AI 接口。
- 知识库包导出完全在本机生成，ClipKey 不会上传它。
Google 登录与 Drive
- 扩展使用
chrome.identity；网页预览使用 Google Identity Services。 -
申请 Drive
applicationDataFolder和邮箱权限，用于显示已登录账号，并同步到你 Google 账号隐藏的应用数据文件夹。 - 同步内容包括剪藏元数据和压缩图片 blob，不包括 API Key。
- 退出前会要求完成同步。你可保留本机剪藏（默认），或在同步成功后删除本机剪藏和图片 blob；设置和 API Key 会保留，任一选择均不会删除 Google 应用数据。同步失败不会清除本机剪藏。
导出、反馈、删除与限制
- Agent 导出仅在本机生成。离线 ZIP 备份代码被保留，但默认隐藏入口。
- 反馈会打开你的邮箱客户端。ClipKey 不会自动附加剪藏、图片或 API Key；是否发送由你决定。
- 移入回收站会保留本机记录和附件以便恢复；本版没有永久删除入口。
- 我们不出售数据、不做跨站广告追踪、不建立邮箱/密码账号体系，也不把剪藏或 API Key 上传到 ClipKey 自有服务器。
联系
隐私相关问题请发送邮件至 ybl20200126@gmail.com。