Privacy Policy
Updated November 5, 2026
Data we process
- On your device: settings, an anonymous installation identity, local library and history, thumbnails, person cards, and a pairing token retained from an earlier local version, if present.
- Google account: Google subject identifier, verified email address, display name, profile image URL, locale, and account status.
- Cloud AI: images you explicitly select, prompts, generated results, task state, source site origin, dimensions, timestamps, and necessary security metadata.
- Source links: the full source URL of an image you choose can be stored with that item in your local library so you can reopen its source. Cloud requests receive the source website origin for the selected item.
- Connection and security: Cloudflare and the LookRecipe Worker process source IP addresses and request metadata to protect the service and apply rate limits. This location-related processing is limited to network connection information.
- Credits and billing: balance, reservations, ledger entries, package, amount, currency, order and payment identifiers, status, and timestamps. LookRecipe does not receive or store card numbers or CVCs.
How data is used and shared
Selected images and prompts are sent to the LookRecipe Cloudflare Worker and OpenAI API only to perform the requested analysis or generation. New analysis and generation requests use OpenAI cloud. Previously saved local media and tasks can be accessed through an already-paired loopback bridge. Stripe processes payments and receives the verified email, selected credit package, checkout locale, order references, and the payment information it collects directly. LookRecipe provides the service and handles refund requests. We do not use your data for advertising; OpenAI processes API data under its API data policies.
Chrome permissions
activeTabandscriptingrun selection and workbench tools only after your action on an eligible page.identitystarts Google sign-in only after you choose to sign in and requests only OpenID, email, and profile scopes.storageandunlimitedStoragekeep settings and local media;downloadssaves files you request.- The fixed host permission reaches only the LookRecipe Worker. Optional loopback permissions support access to saved media and tasks from earlier paired local versions.
Sources, security, storage, and retention
The full source page URL can remain in your local library; cloud uploads receive only its origin. Secrets, Google access tokens, app session tokens, payment keys, and image or prompt bodies are excluded from telemetry. Cloud image storage is counted across installations linked to one Google account: 250 MiB for a free account and 1 GiB while the account has at least one paid order that has not been refunded. References are kept for up to 30 days and generated images for up to 90 days, then scheduled cleanup removes them. Photo-set grid and crop intermediates are removed after required results are safely stored locally. Local Codex assets stay in the bridge's private directory until removed there.
Account deletion
Deleting your cloud account revokes app sessions, removes the Google identity link, clears the available credit balance, detaches installations, and anonymizes the profile. Local library data remains on each device until you remove it. Minimal order, payment, refund, and ledger records may be retained where required for tax, reconciliation, fraud prevention, and legal obligations.
Your choices
You can remove local items, clear local history, sign out, or delete the cloud account from extension settings. Use the contact method on the Chrome Web Store listing for access or deletion questions, and include a request ID or LookRecipe order number when relevant.