Frogpost
Privacy Policy
Frogpost is a Chrome extension that turns an AI chat or email thread into a handoff and drops it into the next chat box. It is made by GhostEngine LLC, a Wyoming limited liability company ("GhostEngine", "we", "us"). This policy explains what Frogpost reads, where it goes, how long it's kept and what you control. It covers the extension, our server, the phone page and frogpost.app.
The short version
- Frogpost reads a page only when you ask it to. That means a grab, a reply draft you request in Gmail, or (with Chrome's built-in AI) a summary written on your own device.
- Your library lives in your browser. It reaches our server only if you're on Pro and turn on sync.
- We never store or log your chats. When our server writes a handoff, the chat passes through it to Anthropic and back, and nothing is kept.
- Phone links are end-to-end encrypted. We relay ciphertext we can't read.
- No accounts, no analytics, no ads, no tracking cookies. We don't sell or share your data, and nobody trains AI models on it.
- Delete everything in one click, on your device and on our server, from Settings → Your data.
1. What we process and why
Frogpost has no accounts. It makes a random license key when you install it (not tied to your name or email). That key is how our server tells installs apart.
| Data | Where it is | Why | How long |
|---|---|---|---|
| Chats you grab: the conversation, email thread, document or selection on the tab you grab | Your device. Sent to the AI that writes the handoff (section 2) | To write the handoff you asked for | Kept on your device with the handoff it made. Never stored on our server |
| Handoff library: handoffs, their title, source page address, time and project name | Your device (free: newest 50; Pro: all). Our server too, if you turn on Pro sync | So you can find and reuse past work, on all your devices and in AI tools you connect over MCP | Until you delete them |
| Search queries (Pro sync) | Sent to Voyage AI to search by meaning | To find handoffs by meaning | Not stored by us |
| Settings and your own API key | Your device only. Never synced, never sent to us | To run Frogpost the way you set it | Until you change them or uninstall |
| License key | Your device. Our server when you use hosted handoffs, Pro or purchases | To apply your plan and limits | While you use Frogpost |
| Subscription and purchases: Stripe customer and subscription IDs, status, rare frogs bought | Our server. Payment details are with Stripe | To run Pro and unlock what you bought | While active, then as tax and accounting law requires |
| Usage counters: hosted handoffs per license key, and free ones per IP address (per /64 network on IPv6) | Our server | To enforce daily limits and prevent abuse | 2 days |
| Encrypted phone handoffs | Our server, as ciphertext only | To deliver handoffs to your paired phone | Newest 20. Deleted 7 days after the last send, or at once by New code or Delete everything |
| Connection data: IP address, browser and device type | Cloudflare (our server) and Lovable (frogpost.app), when you connect | To deliver pages and requests securely | We don't log requests. Hosts keep short-lived security logs under their policies |
| Emails you send us | Our inbox | To answer you | As long as needed to help you |
Our legal bases under the GDPR: contract for handoffs, sync, phone delivery and your subscription; legitimate interests for limits, abuse prevention and security; legal obligation for tax records.
2. Where a chat goes when you grab it
Frogpost uses the first writer available, and after every grab the frog tells you which one wrote it:
- Your own API key. The chat goes from your browser straight to Anthropic or OpenAI under your own account and their terms. It never touches our server.
- Chrome's built-in AI. The chat never leaves your device.
- Our server (a free daily allowance, or Pro). The chat goes to our server on Cloudflare, which sends it to Anthropic's API and returns the handoff. Neither the chat nor the handoff is stored or logged. Under its commercial terms Anthropic does not train on this data and deletes it within 30 days, unless it is flagged for a usage-policy review.
- Offline builder. If none of these is available, Frogpost builds the handoff on your device.
In ask mode, Frogpost instead types the request into the chat you're on, and that site's own AI writes the handoff. The site treats it like any message you send. Nothing comes to us.
On Claude and ChatGPT, a grab may load the full conversation from that site's servers using the session you're already signed in with. That request goes from your browser to the site, not to us. A chat or email can contain other people's personal data. Frogpost processes it only to make the handoff you asked for.
3. Phone links
When you pair a phone, Frogpost encrypts each handoff on your computer with AES-256-GCM. The key is in the part of the QR link after "#", which browsers never send to a server, and the phone page keeps it in that phone's browser storage. Our server stores only the encrypted copies, so we can't read them. Anyone who has the link can, though, so treat it like a password. New code in Settings unpairs the old phone and deletes what it could still fetch.
4. What we never do
- Read a page in the background, or read your browsing history, passwords or form fields. Frogpost needs access to all sites so it can work in any chat box, but it reads only the page you grab from.
- Send a message for you. Frogpost fills the box, and you press send.
- Log chat or handoff text, or put it in analytics or error reports.
- Sell or rent personal data, or share it for advertising.
- Train AI models on your data, or let our providers do so.
- Read your data ourselves, unless you ask us to for support, security requires it, or the law does.
5. Service providers
These companies process data for us, only to run Frogpost and under contracts that restrict them to that. We'll update this list before adding a new one.
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Cloudflare | Hosting: Workers, D1, KV, Vectorize, Durable Objects | License key, counters, subscription status, synced library, encrypted phone handoffs, connection data | Global, US company |
| Anthropic | Writes hosted handoffs (Claude) | Chat text from hosted grabs | US |
| Voyage AI | Search by meaning (Pro sync) | Synced handoff text, search queries | US |
| Stripe | Payments and billing portal | Payment details, email, billing address, license key | US |
| Lovable | Hosts frogpost.app | Website connection data | Sweden, EU |
If you use your own API key, your chat goes to Anthropic or OpenAI under your agreement with them, not ours. We may disclose data if the law requires it, to protect people's safety or our rights, or to a successor if GhostEngine or Frogpost is sold, and this policy keeps applying to it.
6. Your controls
- Delete everything (Settings → Your data) removes your library and the handoff you're carrying from this device. It also removes every synced handoff, search index entry and encrypted phone copy from our server. Your other synced devices delete their copies on their next sync.
- Never read these sites: list sites where Frogpost must not grab, draft replies or write summaries.
- Sync is off by default. Turn it on or off in Settings. Delete any handoff and it's deleted from our server too.
- Keep chats off our server by using your own API key, Chrome's built-in AI or ask mode.
- Uninstall to remove everything Frogpost keeps on your device.
- To delete your license and purchase record too, cancel any subscription in the billing portal and email us your license key (it's on the Settings page). We'll delete it within 30 days, except records the law requires us to keep.
7. Your privacy rights
Everyone. You can ask us to access, correct, export or delete your data, or to stop processing it. Email zoltan@frogpost.app with your license key, because we have no accounts and that is how we find your data. We'll reply within 30 days. If you ask, we won't charge you or treat you differently.
EEA, UK and Switzerland. You also have the right to object to processing based on legitimate interests, to restrict processing, and to lodge a complaint with your data protection authority. GhostEngine is the controller.
California and other US states. In the past 12 months we collected identifiers (license key, IP address), commercial information (purchases) and the content you chose to grab, for the purposes in section 1, from you and your device. We don't sell or share personal information as the CCPA/CPRA defines those terms, and we don't use sensitive personal information to infer anything about you. So there is nothing to opt out of, and we honor Global Privacy Control by default. You can use an authorized agent. We'll reply to California requests within 45 days.
8. International transfers
We and most of our providers are in the United States. When EU, UK or Swiss data is transferred, we rely on the EU-US Data Privacy Framework (and its UK and Swiss extensions) where the provider is certified, and otherwise on the European Commission's Standard Contractual Clauses.
9. Security
All traffic uses HTTPS. Phone handoffs are end-to-end encrypted, payment cards never reach our servers, and our server stores the minimum listed above. Your license key unlocks your Pro library and MCP access, so keep it private. No system is perfectly secure. If a breach affects your data, we'll notify you and the authorities as the law requires.
10. Children
Frogpost is for adults. You must be 18 or older to use it. We don't knowingly process children's data. If you believe a child has used Frogpost, email us and we'll delete what we hold.
11. Cookies
Frogpost and our server set no cookies and use no analytics or tracking. The extension keeps its data in Chrome's extension storage, and the phone page keeps its pairing key in the phone's browser storage. Both are strictly necessary for the features you use. Stripe sets its own cookies on its checkout and billing pages. frogpost.app sets no cookies and loads no trackers. If that changes, we'll ask your consent first.
12. Chrome Web Store disclosure
Frogpost's use of information received from Chrome APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. We use data only to provide Frogpost's single purpose: grabbing, writing, keeping and dropping handoffs. We never transfer it for advertising, credit decisions or data brokering, and humans don't read it except as described in section 4.
13. Changes
When we update this policy we change the date at the top. For a material change, we'll give notice before it takes effect, for example in the extension.
14. Contact
Questions or requests: zoltan@frogpost.app
Mail: GhostEngine LLC, 390 NE 191st St STE 17348, Miami, FL 33179, United States