Privacy Policy
Last updated: April 17, 2026

Google Scholar Optimizer ("the extension") is a browser extension that enhances the Google Scholar interface. This policy explains what data is collected, how it is used, and your rights.

1. Data collected by the extension (local)

The extension stores the following data locally in your browser using chrome.storage.sync:

Paper metadata you label (title, authors, year, venue, citation count, URL)
Your label choices (Read, To-Read, Archived)
Extension settings (reranking on/off, labels on/off, etc.)
This data never leaves your device unless you create an account (see below). It is not sent to any server and is not accessible to us.

1. Account data (optional)

Creating an account is optional and required only for premium features (AI summaries, recommendations). If you create an account, we store:

Your email address
A bcrypt-hashed password (we never store your plain-text password)
Your subscription plan (free or premium)
Your Stripe customer ID (if you subscribe)
This data is stored in Upstash Redis (hosted in the EU) and is used solely to authenticate you and verify your subscription status.

1. Premium features and third-party APIs

When you use premium features, the extension sends data to our backend server, which in turn calls third-party APIs:

AI summaries — the paper title and a short snippet are sent to OpenAI's API to generate a summary. OpenAI's privacy policy applies.
Recommendations — paper titles and arXiv IDs (where available) are sent to the Semantic Scholar API to find related papers. Semantic Scholar's privacy policy applies.
Author tooltips — the author's name is sent to the Semantic Scholar API. Results are cached for 24 hours on our server.
We do not sell or share your data with any third party beyond what is necessary to operate these features.

1. Payments

Payments are handled entirely by Stripe. We do not store or process credit card information. When you subscribe, Stripe shares your email address with us via webhook to activate your premium plan.

1. Data retention

Local extension data: stored until you uninstall the extension or clear browser storage.
Account data: retained while your account is active. You can request deletion at any time by emailing us.
API cache entries: paper summaries and recommendations are cached on our server for up to 30 days, then automatically expire.
6. Permissions used by the extension

storage — to save your labels and settings locally.
alarms — to schedule background token refresh.
host permissions for scholar.google. — to inject the interface enhancements on Google Scholar pages.
host permissions for .vercel.app — to communicate with the backend API for premium features.
The extension does not use tabs, browsing history, bookmarks, downloads, geolocation, camera, microphone, or clipboard APIs.

1. Children's privacy

The extension is not directed at children under 13. We do not knowingly collect personal information from children.

1. Changes to this policy

We may update this policy. If we make material changes, we will update the "Last updated" date above. Continued use of the extension after changes constitutes acceptance of the updated policy.