What leaves your browser, and when
The short form. The full policy is publishing/PRIVACY.md on GitHub, last updated 31 August 2026; where the two differ, it governs.
Changed on 31 August 2026. Earlier versions sent only your latest message and the reply. Since then, your side of the whole conversation goes, bounded as below, and still only when you press.
CONTEXA runs only on claude.ai and touches no other site. Nothing leaves your browser until you press the trigger, and the text that leaves is never stored.
In the order it happens
| Moment | Read | Sent | Spent |
|---|---|---|---|
| A reply finishes | That reply, copied from the page, so the trigger knows what it would be about | Nothing | Nothing |
| You never press | Nothing more | Nothing | Nothing |
| You press the trigger | Your own messages in that conversation | Your own messages (at most 40, 2,000 characters each, 12,000 in total) and that reply (at most 6,000 characters) | One of the day's 20 |
| You click a move | Nothing | Nothing | Nothing |
Claude's earlier replies are never sent. Your other conversations, your account details and other pages are never read. The limits are applied by the extension before it sends and again by the backend before anything is forwarded; the second one binds.
Where it goes
By default, to the CONTEXA backend, a Cloudflare Worker, which applies the limits, forwards the text to Anthropic's API to write the messages, returns them, and discards the text. It does not write your conversation to any database, log or file. With your own API key, the text goes from your browser to api.anthropic.com directly, and the backend receives nothing.
What is kept, and for how long
| Data | Kept |
|---|---|
| Your messages and the reply | Not stored. Held in memory for the duration of the request, then discarded. Not used to train any model. |
| The suggested messages | Not stored on the backend. Cached briefly in your own browser so pressing twice under the same reply does not repeat the request. |
| Anonymous device token | On your device until you clear the extension's storage or uninstall. |
| Daily counters (token and hashed IP) | Deleted after 48 hours. |
| Your API key and settings | On your device only, until you remove them. |
The two things that are stored, and why
The device token is a random identifier generated on first use and kept in the extension's local storage. It exists only to apply the daily limit. It is not derived from you, your browser profile, your hardware or your claude.ai account, it is not linked to an email address or a name, and reinstalling generates a new one.
The backend receives your IP address, as any web server does, and uses it for a second rate limit. It is never stored in readable form: it is combined with a secret salt and hashed with SHA-256, and only the hash is kept as a counter key.
Who else is involved
- Anthropic PBC
- Processes the text to write the messages, under Anthropic's API terms. With your own key, under your own agreement with Anthropic.
- Cloudflare, Inc.
- Hosts the backend and handles the network request.
No other third party receives any data. There are no accounts, no profiles, no tracking, no analytics and no advertising, and nothing is sold or shared.
What the extension asks the browser for
- Access to
claude.ai, to read the page and draw the card. It runs on no other site. - Access to
api.anthropic.com, used only when you supply your own key. - Access to the CONTEXA backend, the default path.
- Local storage, for the settings kept on your device: on or off, your API key if you add one, the backend URL and a model name (both advanced settings), and the device token.
Your choices
- Switch it off in the extension's settings. Nothing is sent while it is off.
- Use your own API key. No CONTEXA server is involved, so no third party besides Anthropic.
- Uninstall it. All locally stored settings, including the key and the device token, go with it; the counters on the backend expire on their own within 48 hours.
This site
These pages are static files served from one origin. No fonts, scripts, images or analytics are loaded from anywhere else, nothing is measured, and there is no cookie banner because there is nothing to consent to.