USRUSRKey is for ordinary background and preferences, not passwords, ID numbers, or sensitive information. Local browser storage and downloaded backups are not encrypted vaults.
Website requests
The app and extension contain no analytics scripts or advertising. Cloudflare hosts the websites and processes normal requests, including network information such as IP addresses, requested URLs, and browser headers. Hosting security and request logs are separate from your key. Do not put personal key text in URL paths or query parameters.
Local storage and separate copies
The website saves your keys and sharing preferences in localStorage for that site and browser. If installed, the extension automatically mirrors your active key into chrome.storage.local while a USRKey page is open. The extension does not use Chrome sync storage. Other software with access to your browser profile or device may be able to access local data.
usrkey.com and www.usrkey.com have separate website storage. The extension can mirror the active key from either. If you use both, keep only your intended active key open while sharing.
Sharing with AI services
The extension runs on USRKey and the listed ChatGPT, Claude, Gemini, Perplexity, and Copilot sites. Clicking its button opens an extension-owned preview showing the destination, active key, sections, and exact text. Approving adds that text to the original chat page's draft. If a suitable composer cannot be found, it attempts to copy the approved text instead and reports the result. It never sends the chat message for you.
Text placed in an AI page is available to that page immediately and is handled under the AI provider's own policies. Removing a section from USRKey, closing the extension, or deleting your key cannot retract a draft, sent message, or memory already held by an AI service. Use that service's controls to remove its copies.
The extension locates an editable chat input and preserves an existing draft when inserting text. It does not upload conversation histories to USRKey. AI content scripts cannot read the extension's stored key; they receive the selected text only after approval.
Copy, backup, links, and developer exports
Copying puts readable text on your system clipboard, which may be accessible to clipboard history or other software. A backup JSON file contains every key and its sharing choices in readable text. Exported Markdown files are also readable. Keep these files private and delete them separately when no longer needed.
Private share links encrypt the active key in the URL fragment using a separate unlocking phrase. Creating the link does not upload the key to USRKey. Anyone with both the link and phrase can read it, and forwarding or saving those items creates additional copies. Browser history, extensions, or sync software may retain URLs. Share the phrase separately.
The optional local MCP connector reads identity.md, stack.md, now.md, and history.md from the configured folder and supplies them to a connected AI client. Browser sharing choices and agents.md do not enforce permissions in that connector. Only put pages you want that client to read in its folder.
Delete your data
“Start over” clears the active key. “Delete all local keys” clears every key and sharing choice on the current USRKey site in this browser and signals the extension to clear its mirrored active copy. If you clear website data using browser settings while the site is closed, open the site again so the extension can observe the deletion, or remove the extension to clear its storage. Other browsers and the www/non-www site are separate copies.
These actions do not delete downloaded backups, exported files, clipboard histories, shared links, or data held by an AI provider. USRKey cannot recover a deleted key without a backup.
Extension permissions
storageStores the active key and choices locally, accessible to trusted extension pages.clipboardWriteCopies approved text when automatic draft insertion fails.host accessUSRKey domains to mirror the active key, and the specific supported AI sites to show the button and add approved text.Our use of your key
USRKey does not sell your key, send it to advertising or analytics vendors, or use it to train AI models. Sharing it with your chosen AI service is an action you control, and that service's practices are separate.
Children
USRKey isn't directed at children and doesn't knowingly collect information from anyone under 13.
Changes to this policy
If this ever changes — say, a feature is added that involves a server — this page will be updated first, in public, with the date above moved and the reason stated plainly.
Contact
Questions about this policy: cgarner40@gmail.com.