ChatBack — Privacy Policy
Overview
ChatBack is a local desktop application developed by Schlaben (“we,” “us,” “our”). This Privacy Policy explains how ChatBack handles your data.
The short version: ChatBack collects no conversation data. Your conversation archives and Google login session remain strictly on your local machine.
1. Data We Do Not Collect
ChatBack does not collect, transmit, store, or process your conversations or personal files on external servers. ChatBack operates as a local desktop software utility on your personal machine.
Specifically, we do not collect:
- ❌ Your Google account credentials or passwords
- ❌ Your AI conversation content, transcripts, or prompts
- ❌ Usage analytics or telemetry tracking your behavior
- ❌ Crash dumps containing conversation memory
- ❌ Cookies (on our end — see §3 for local Google session cookies)
- ❌ Location data
2. How ChatBack Works
ChatBack operates an embedded Chromium browser on your device to access your AI conversations on supported platforms (currently Google Gemini). Here’s what happens and where:
| Action | Where it happens | Data destination |
|---|---|---|
| Google login | Your device → Google’s servers | Google only |
| Conversation discovery | Your device (reads Gemini sidebar) | Your device only |
| Conversation extraction | Your device (scrolls + reads DOM) | Your device only |
| Export to Markdown/DOCX/PDF | Your device | Files saved to a folder you choose on your device |
| Image downloading | Your device → Google’s CDN | Files saved to your device |
| Session cookies | Google → Your device | Stored locally in %APPDATA%\ChatBack\.gemini-profile\ folder |
No conversation data or transcripts are transmitted to Schlaben, any cloud server, or any analytics service.
3. Local Browser Profile
ChatBack uses a persistent Chromium browser profile (stored in %APPDATA%\ChatBack\.gemini-profile\ on your device) to maintain your Google login session. This profile:
- Is stored locally on your device
- Contains Google session cookies set by Google’s own login page (used directly when communicating with Google to access your authorized conversations)
- Is never uploaded, synced, or transmitted to Schlaben or any third-party servers
- Can be deleted at any time by removing the
%APPDATA%\ChatBack\.gemini-profile\folder - Is functionally identical to a regular Chrome browser profile
ChatBack never sees, intercepts, or stores your Google password. You sign in directly on Google’s own login page within a standard Chromium browser.
4. License Key Validation
If you purchase a ChatBack license, the application stores your license key locally and periodically validates it against the Lemon Squeezy API:
| Data sent | Sent to | Purpose |
|---|---|---|
| License key string | api.lemonsqueezy.com | Validate license activation |
Computer name (instance_name) | api.lemonsqueezy.com | Distinguish active device activations under your 2-device license |
License validation requests do not include your conversation content, transcripts, or prompts. The validation result is cached locally for up to 7 days, allowing offline operation between checks.
Lemon Squeezy’s privacy policy applies to the purchase transaction: https://www.lemonsqueezy.com/privacy
5. Third-Party Services & Network Requests
ChatBack interacts with the following external endpoints, all initiated directly from your device:
| Service / Endpoint | Purpose | Privacy Policy |
|---|---|---|
Google Gemini & CDN (gemini.google.com, lh3.googleusercontent.com) | Loading conversation transcripts and downloading full-resolution source images | Google Privacy Policy |
Lemon Squeezy (api.lemonsqueezy.com) | License key activation and periodic status validation only | Lemon Squeezy Privacy |
Schlaben Version Check (schlaben.com/chatback/version.json) | Checking for application updates (downloads standard version manifest only; transmits no personal identifiers) | Schlaben Privacy Policy |
| Web Fonts & Math Assets (KaTeX / Google Fonts CDN) | Rendering LaTeX equations and typography within the built-in reader UI | Google Fonts Privacy |
ChatBack has no affiliation with, endorsement by, or partnership with Google or Alphabet Inc.
6. Children’s Privacy
ChatBack does not knowingly collect any data from anyone, including children under 13 (COPPA) or under 16 (GDPR). Since ChatBack collects no data whatsoever, no age-specific provisions are necessary.
7. Data Portability & Your Rights
Under GDPR (EU), CCPA (California), and similar data protection regulations worldwide, you have the right to access, export, and back up your own personal data from any service provider.
ChatBack is a data portability tool that helps you exercise this right. Your exported conversations are your personal property. We have no access to them and make no claim over them.
8. Security
Since ChatBack processes all data locally and transmits nothing to our servers, the security of your data depends on the security of your device. We recommend:
- Keeping your operating system and ChatBack updated
- Using full-disk encryption (BitLocker on Windows, FileVault on macOS)
- Not sharing your
.gemini-profile/folder with others (it contains your Google session)
9. Changes to This Policy
If we change this Privacy Policy, we will update the “Last Updated” date at the top. Since ChatBack collects no data, significant changes are unlikely.
10. Contact
For questions about this Privacy Policy:
- Website: schlaben.com/chatback
ChatBack is not affiliated with or endorsed by Google LLC. Google Gemini is a trademark of Google LLC.