Privacy policy
The short version. henna sends the text you select, and its own instructions, to the one AI provider you chose and configured with your own API key. It sends nothing anywhere else. There is no henna server, no account, and no analytics. Nobody at OPENXEL can see what you select or what is drafted.
What henna handles
The text you select. When you invoke henna on a selection, that text is sent to the AI provider you configured, together with henna's own instructions and any instruction you wrote. This is the entire purpose of the extension and it happens only when you invoke it — never in the background, never on pages you have not acted on.
Your API key. You supply a key from Google, Anthropic or OpenAI. It is
stored using chrome.storage.local, which keeps it in your own browser profile
on your own machine. It is deliberately not stored in
chrome.storage.sync, so it is never replicated through your Google account or
to your other devices. It is sent only to the provider it belongs to, as that provider's
API requires. It is not encrypted: anything with access to your Chrome profile can read
it.
Your settings. The provider and model you chose, your default tone, your standing instruction, and whether the ✦ button is on. All in the same local storage, on your machine.
What henna does not do
- No henna server. There is no backend. Nothing is sent to OPENXEL or to any domain we control. We could not read your email if we wanted to.
- No account, no sign-in, no identifier. henna does not know who you are.
- No analytics, no telemetry, no crash reporting, no ping. Not on by default, not switchable on — none exists.
- No selling, renting or sharing of data. There is no data on our side to sell.
- No reading of pages you have not acted on. henna reads a selection only when you invoke it.
- No page content, URLs or browsing history. The page's address is never transmitted.
- No remote code. Everything henna runs ships inside the extension package.
Where your text actually goes
To exactly one company, chosen by you in settings:
| Provider | Endpoint | Their terms |
|---|---|---|
| Google (Gemini) | generativelanguage.googleapis.com | ai.google.dev |
| Anthropic (Claude) | api.anthropic.com | anthropic.com |
| OpenAI | api.openai.com | openai.com |
Once your text reaches that provider, their privacy policy governs it, not this one. How long they retain it, and whether they use it to train models, is their decision and yours — set through your account with them. Read the terms of whichever you pick. henna's settings page names the host it will contact before you save anything.
Permissions, and why each exists
henna asks for nothing at install. Every access is requested later, in context, at the moment it is needed.
| Permission | Why |
|---|---|
activeTab | Read the selection on the tab you invoked henna on — and only that tab, only after you press the shortcut, click the menu item, or click the icon. Access ends when you leave the page. |
scripting | Place henna's panel on that tab. |
storage | Keep your key and settings on your machine. |
contextMenus | Put “Draft a reply” in the right-click menu. |
| The provider's host (optional) | Send your selection to the one provider you chose. Requested when you save your key. |
<all_urls> (optional, off) | Only if you switch on the ✦ button, which has to watch for a selection on any page. It is off by default and everything else works without it. Switching it off revokes the access. |
Children
henna is not directed at children and is not intended for use by anyone under 13.
Changes
Material changes to this policy will be published on this page with a new date at the top. The version that ships with an extension release is the one in that release's package.