Unpack Privacy Policy

Introduction

Welcome to Unpack ("we," "our," or "us"). Unpack is a browser extension (compatible with Google Chrome, Microsoft Edge, and Mozilla Firefox) designed to help users explore topics through curated Wikipedia articles and generated content. This Privacy Policy explains how we collect, use, and protect your information when you use our extension.

Information We Collect

Information You Provide

• LLM API Keys: You may provide your own API keys for various Large Language Model (LLM) services (such as OpenAI, Google Gemini, Anthropic Claude, Perplexity, Grok (xAI), Meta Llama, DeepSeek, or other OpenAI-compatible APIs). These are required for the extension's content generation features if you choose to use cloud-based LLMs. The on-device Chrome AI (Gemini Nano) option does not require a user-provided API key.
• Cloud Storage API Credentials: If you choose to enable features like publishing generated content, you provide API credentials (e.g., Access Key ID, Secret Access Key, Bucket/Space Name, Region) for S3-compatible cloud storage services such as DigitalOcean Spaces or Amazon Web Services (AWS S3).

Information Collected Automatically

• Usage Data: We collect information about how you interact with the extension, including:
  • Topics you search for (for packet creation)
  • Articles you visit within a packet
  • Progress through content packets
  • Tab grouping preferences (if enabled)
  • Settings and configurations you choose for the extension
• Technical Data: Basic technical information such as:
  • Browser type and version (as available to extensions)
  • Extension version
  • Error logs when issues occur within the extension

How We Use Your Information

We use the information we collect to:

• Provide Core Functionality: Generate content recommendations and summaries using your configured LLM, track article progress, and optionally create tab groups.
• Enable Content Publishing: For users who provide S3-compatible cloud storage credentials (e.g., DigitalOcean Spaces, AWS S3), we publish generated content like summaries to your specified cloud storage.
• Improve the Extension: Analyze usage patterns (locally) to improve features and fix bugs.

Data Storage

Local Storage

• All primary data collected and generated by Unpack is stored locally on your device using the browser extension's storage API.
• This includes:
  • Your API keys/credentials for LLMs and Cloud Storage providers.
  • Packet definitions (PacketImages) and your progress within them (PacketInstances).
  • Article visit history within packets.
  • Extension settings and LLM configurations.
  • Locally generated content (e.g., HTML, CSS for summaries/quizzes) before it is published to your cloud storage.

Third-Party Services

• LLM Services: We transmit search queries and content generation prompts to your configured LLM service (e.g., OpenAI, Google Gemini, Anthropic, Perplexity, Grok, Llama, DeepSeek, other OpenAI-compatible APIs, or use the on-device Chrome AI). This processing is done using your own API key (for cloud services) or the browser's built-in capabilities (for Chrome AI).
• Cloud Storage Providers (e.g., DigitalOcean Spaces, AWS S3): If you enable features requiring it, we upload generated files (like HTML and CSS for summaries) to your configured S3-compatible cloud storage.

Data Security

We implement reasonable security measures to protect your information:

• API Keys/Credentials: Your API keys and cloud storage credentials are stored locally in your browser's extension storage and are only transmitted directly to the respective services by the extension as needed to perform requested actions.
• No Remote Database for User Data: We do not maintain a central database of your personal data, packet content, or API keys. All such data remains on your device or, in the case of published content, in your own cloud storage account.
• Secure Connections: All communications with third-party APIs (LLMs, Cloud Storage) use secure HTTPS connections.

Data Sharing

We do not share your data with third parties except as necessary to provide the extension's functionality, under your control and using your credentials:

• LLM Services: Your search queries or content generation prompts are shared with your chosen and configured LLM provider (e.g., OpenAI, Google Gemini, Anthropic, Perplexity, Grok, Llama, DeepSeek, OpenAI-compatible APIs, or Chrome AI) to generate content. This uses your API key for cloud services.
• Cloud Storage Providers (if enabled): Generated files are uploaded to your own configured S3-compatible cloud storage account (e.g., DigitalOcean Space, AWS S3 bucket).

Your Rights and Choices

You have control over your data:

• Access: You can view all data stored by the extension in your browser's local extension storage (though direct viewing might require developer tools). Settings and packet information are accessible through the extension's interface.
• Deletion: You can delete packets, LLM configurations, cloud storage configurations, and all locally stored data at any time through the extension's interface or by uninstalling the extension.
• API Keys/Credentials: You can update or remove your API keys and cloud storage credentials through the extension's settings at any time.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page (or an equivalent accessible within the extension) and updating the "Last Updated" date.

Children's Privacy

Our extension is not intended for children under 13 years of age (or the equivalent minimum age in relevant jurisdictions). We do not knowingly collect personal information from children.