Private by design — not by promise

What Deja saves

• The prompts you send on the supported sites below, saved into your browser’s own storage on this device — nowhere else.
• Your settings (what gets saved, where Deja works, privacy rules), also stored only on this device.
• Nothing else. Deja does not collect browsing history, page content, AI answers, or any usage or tracking data.

What Deja never does

• Never sends anything over the internet. Your data cannot leak, because it is never sent.
• No tracking or analytics — not even anonymous usage statistics or crash reports.
• No accounts, no cloud, no other companies.
• Never reads the AI’s answers — only the text you type is saved.
• Never reads password, verification-code, or payment boxes. Saved page links are shortened so they don’t keep search strings or private fragments.

Built-in protections

• Hide personal info (on by default). Before a prompt is saved, details Deja recognises — email addresses, phone numbers, card numbers, API keys and similar secrets — are replaced with placeholders like [email]. The real values never reach your library or any backup you download. You can turn categories on or off in settings.
• Pause anytime. One click stops saving everywhere; you can turn off any site; private windows are paused by default.
• Never save from… You can block a whole site, or add a text rule so matching prompts are never stored.
• The chat site can’t see Deja. Deja’s search box and suggestions are drawn inside the page you’re on, so we make sure the page itself can’t read them or set them off. It can’t reach into what Deja shows you, and it can’t fake a click to make Deja open your library. Only a real key or click from you does that.

Where your data lives, and how to delete it

Everything lives in your browser profile on your device. You are in full control:

• Download your library as a readable document or a full backup anytime — no lock-in.
• Delete individual prompts (short Undo, then gone), or wipe everything from settings.
• Uninstalling the extension removes Deja’s local data with it.

Where Deja runs

Deja is only active on these sites — you can check the full list in the extension’s manifest:

• ChatGPT chatgpt.com chat.openai.com
• Claude claude.ai
• Gemini gemini.google.com
• DeepSeek chat.deepseek.com
• Grok grok.com

Permissions, explained

• storage Save your library and settings locally in the browser.
• alarms Clear the “paused” toolbar badge when a timed pause ends. Local only.
• Access to the five sites above Read the message box you type into, so prompts can be saved and similar past prompts offered back. Deja reads only that composer, never other page content.

Data sharing and selling

Deja does not share, sell, or transfer your data to anyone — including us. Since no data ever leaves your device, there is nothing we could share even if we wanted to.

Changes to this policy

If Deja’s data practices ever change (for example, an optional cloud backup), this policy will be updated before that change ships, the “Last updated” date will change, and any new data flow will be strictly opt-in — never a silent default.

Contact