Kraiken is built local-first by design. Your prompt trees never leave your machine unless you explicitly ask them to. This policy explains, in plain language, what little account-level data we do collect, why we collect it, and the trusted services that help us run the ship.
Last updated: July 13, 2026
What We Collect
Kraiken distinguishes between two categories of data. The vast majority of what makes Kraiken useful lives entirely on your device; only a thin layer of account metadata ever reaches our cloud.
Local-First Prompt Data
Never sent to our servers
Every prompt tree, context layer, tentacle, placeholder value, and personal setting you create inside the Chrome Extension is stored locally in chrome.storage.local. This includes:
None of this data is transmitted to kraiken.ai servers. It lives on your machine, under your control — anchored in the deep.
Account-Level Cloud Data
Stored on our infrastructure
When you create a Kraiken account, sign in, or join a paid tier, we process a minimal set of account metadata through our backend. This includes:
Email address — used as your account identifier
Hashed password — managed by Supabase Auth; we never see the plaintext
Subscription status — plan tier and billing reference from Stripe
Newsletter consent — stored by Brevo under double opt-in
We do not collect browsing history, AI chat content, keystroke logs, device fingerprints, or any data from inside your prompt trees.
How We Use Your Data
We use account-level data only for the narrow purposes required to operate Kraiken. Each purpose maps to a specific service so you always know exactly where your information flows.
Authentication & account access — Your email and hashed password are processed by Supabase to authenticate you, manage sessions, and link your subscription across devices.
Billing & subscription management — Payment and plan data is handled by Stripe. We never see or store your full card number; Stripe returns only a secure customer reference and subscription status.
Marketing newsletters — If you opt in, your email is stored by Brevo under a double opt-in flow. You can unsubscribe at any time using the link in any email.
Service operation & delivery — We use account metadata to provision features tied to your tier (for example, enabling Cloud Backups on the Overlord plan) and to keep the site functioning at the edge.
Support & troubleshooting — If you contact us, we use the contents of your message to respond and resolve your request. See the Contact Information section below.
We do not sell your data. We do not use your prompt trees to train AI models. We do not share account data with advertising networks.
Data Storage
Kraiken is intentionally local-first. The extension writes every prompt tree and context layer to chrome.storage.local, which lives on the device where the extension is installed. Clearing your browser data, uninstalling the extension, or wiping your profile will remove this data — we hold no shadow copy of it.
Account-level cloud data is stored by our trusted providers as described in the Third-Party Services section. Hosting and edge logic run through Cloudflare Workers & Pages, authentication and database records through Supabase, billing records through Stripe, and mailing lists through Brevo. Each provider retains data according to their own retention schedule and your account status with us.
Tip: Use the extension's built-in Import / Export engine to back up your swarm as a JSON file. Because we never store your prompt trees, exporting is the recommended way to keep a personal backup.
Third-Party Services
Kraiken relies on the following reputable services. Each one is a separate data controller or processor under its own privacy policy; we encourage you to review them. We share only the minimum data each service needs to function.
Cloudflare
Hosting & Edge Logic (Workers & Pages)
Delivers kraiken.ai and runs serverless edge functions. Cloudflare may process request metadata such as IP address as part of serving and securing the site.
Questions, data requests, or privacy concerns are welcome. Reach the crew at crew@kraiken.ai or any *@kraiken.ai address.
Heads up on email routing: Messages sent to any *@kraiken.ai address are automatically forwarded to a personal Gmail inbox so we can respond to support requests quickly. This means your email content will transit Google's infrastructure and be subject to Google's Privacy Policy. Please avoid including sensitive personal data (such as passwords or card numbers) in support emails — we will never ask for them.
Your Rights
Depending on where you live, you may have rights over your personal data under regulations such as the EU/UK General Data Protection Regulation (GDPR) or the California Consumer Privacy Act (CCPA). Subject to applicable law, these rights typically include:
Access — Request a copy of the personal data we hold about you.
Rectification — Ask us to correct inaccurate or incomplete data.
Erasure ("right to be forgotten") — Request that we delete your account and associated data.
Restriction — Ask us to limit how we process your data in certain circumstances.
Portability — Receive your data in a structured, machine-readable format.
Objection — Object to processing based on legitimate interests or for direct marketing.
Withdrawal of consent — Revoke consent for marketing emails at any time (unsubscribe links are included in every message).
No retaliation — We will not discriminate against you for exercising any of these rights.
To exercise any of these rights, email crew@kraiken.ai from the address associated with your account. We will respond within the timeframe required by applicable law (typically 30 days). For verification, we may need to confirm your identity before acting on a request.
If you are in the EU, UK, or EEA, you also have the right to lodge a complaint with your local data protection authority. California residents may also have rights under the Shine the Light law and the California Privacy Rights Act (CPRA).
Changes to This Policy
We may update this Data Privacy Policy as Kraiken evolves. When we do, we will revise the "Last updated" date at the top of this page and, for material changes, notify you via email or an in-product notice. We encourage you to review this page periodically.