Your page. Your choice.

Privacy information for PLAINGuide. Updated 3 November 2026.

PLAINGuide is operated by Dave Peace in Israel.

Page access starts with you

The Chrome helper asks before reading the active page. It collects a bounded selection of visible text, headings, control labels and state. In ordinary website-reading mode, typed form values, passwords and editable text are excluded. Minimization is best effort: visible text and labels may still contain personal information.

Full page URLs and navigation signatures used to check stale targets stay in the extension. The service receives the page origin and minimized context, your goal, recent guiding steps and any answer you supply. Do not share a page or goal containing information you do not want processed.

Optional screenshot help

Screenshot help is separate from website access. You choose a tab capture, one frame from a window or screen you select, or a PNG/JPEG file. Window or screen capture stops after that frame. You review the image, can cover private areas, and explicitly agree before it is sent to PLAINGuide and OpenAI. Images can contain typed values, passwords, financial details and private messages: those are not automatically removed. Do not share them.

Images are resized and re-encoded locally. PLAINGuide does not persist the submitted image in account storage, usage logs, analytics or support records. Written guidance derived from the image can be encrypted and cached for up to 24 hours to avoid duplicate requests. OpenAI processes the image under its own API data-handling policies. A model request is made with response storage disabled; this is not a promise of zero retention by the provider.

The outline shown in screenshot mode refers only to that picture. It does not identify a live control or execute a click. Images are never captured or sent automatically as you navigate. Closing the screenshot view discards its local image.

How information is used

PLAINGuide uses Cloudflare for its service and storage, OpenAI for model-backed guidance and Creem for subscription billing. Optional product analytics use PostHog. The fictional examples do not contact an AI provider.

Your OpenAI provider key is managed by the service owner and is never sent to the browser. Account passwords are hashed. Session credentials are held in this website’s session storage or trusted extension session storage. Keep access to your device and browser secure.

Connecting the Chrome helper

When you choose “Continue” in the extension, a signed-in PLAINGuide website tab can authorize it with a short-lived, single-use sign-in grant. Your password is not transferred to the extension, and sign-in credentials are not put in a URL. If website sign-in is needed, the helper opens it and finishes connecting automatically after you sign in. The connection attempt waits for up to two minutes; if it expires, choose Continue again. Email and password entry stays on the website.

Optional analytics

Product analytics are off unless you opt in. Analytics exclude raw page text, goals and model instructions. You can change this choice in account Settings. Operational records needed for authentication, billing, spending controls and security are separate from optional product analytics.

When enabled, a short relevance check can use your request, recent task clarification and page title to help ask a question about an unrelated task. It does not decide subscription penalties. Only bounded usage and routing metadata is retained for this check.

Support and administrator access

Authorized administrators can view account details, usage records and support conversations to operate the service. They can grant or revoke time-limited complimentary plan access, suspend access, revoke sessions and manage support cases. Internal account notes are visible only to administrators. Their text is removed when your account closes, or after 400 days, whichever comes first. These actions are logged. A minimal plan-access history without note text remains to prevent reuse of limited reviewer access. Administrators do not see your password, and support messages are excluded from product analytics.

Account data and retention

• Login email and password are removed when your account closes.
• Cached guidance is removed on closure. Safe usage and duplicate-request records may be retained for up to 180 days. Unresolved charges remain until reviewed.
• Billing provider identifiers remain for 400 days after closure, then become irreversible event markers. Creem retains its own payment records.
• Queued behavioral events are removed on closure. A privacy support case tracks any additional provider-side erasure.
• Resolved support and operator audit records are retained for 400 days. Unresolved privacy and financial cases remain until reviewed.

Your controls

Stop the helper to remove page access. During an active task, new pages on the same website are shared and checked automatically with a fresh request. A different website or tab requires permission again. Closing the panel stops the task. Use Settings to change analytics, download account records, request an email change or close your account. Cancel subscription renewal before closure. Email confirmations protect password recovery, email changes and account closure.

Support messages are stored with your account so we can respond to the problem. They are not sent to product analytics. Optional research consent on a support request is separate from analytics consent and can be withdrawn from that request.

Questions or privacy requests

Email support@plainguide.online for privacy requests, including if you cannot access an account. You can also open a privacy support request when signed in. For a forgotten password, use the account recovery screen.