Privacy Policy

Last updated: 25 October 2026

1. Who we are

Sentence Checker (the “Service”) is a product of Foresty Ltd, a company registered in England and Wales under company number 16775596, with its registered office at 124 City Road, London EC1V 2NX, United Kingdom (“we”). We are the data controller for the personal data described here, and we are registered with the Information Commissioner’s Office under number ZC126206. Contact us at info@foresty.me or by post at the address above. We have not appointed a data protection officer, because the law does not require us to.

2. What the Service does with your text

When you ask the extension or the website to check, restyle or translate text, that text is sent to our servers and then to our language-model provider, OpenAI (United States), under its API terms, which exclude the use of API data for model training. We send only the text itself: no e-mail address, account identifier or IP address accompanies it to the provider.

By default we do not store the text you submit. If you are signed in, your checks are kept as your “history” for up to 90 days so you can reopen them; you can delete your history at any time in the extension or on the account page, and deleting your account removes it too.

AI chat is available to signed-in users. Your messages and the assistant’s replies are stored so the conversation can continue, and are deleted 30 days after the last message; you can delete them sooner from the account page. To let the provider detect abuse of its models, chat requests carry a random pseudonymous identifier derived from your account. It cannot be traced back to you by the provider and is not used for anything else.

3. The browser extension

The extension has access to the websites you visit, as Chrome lists when you install it, and uses it only when you ask: it reads the text you selected when you use its menu item, keyboard shortcut or toolbar button, and, if you turn on checking in text fields, it shows its button in the field you are typing in and reads that field when you click the button. Text is never sent automatically. It sees the addresses of your open tabs only inside your browser, to add or skip that button, and never sends them to us. It writes to your clipboard when you click Copy, and reads it only when you click “Paste and check”.

When you click Sign in, the extension reads the e-mail address of the account signed in to your Chrome profile, if there is one, and fills it into our sign-in page so you do not have to type it. It is passed in the part of the page address that browsers do not send to servers, and reaches us only if you sign in with it.

In your browser the extension keeps its settings, your sign-in token, a random installation identifier, the sites where you hid its in-field button, and a counter used to ask once for a rating. Text handed from a page to the side panel is held in the browser’s memory only until the panel reads it.

When you remove the extension, Chrome opens a short survey page. If you answer it, we store the reason you chose, the extension version and the installation identifier, and nothing else.

4. Data we collect

• Usage records: for each request, the type of action, the number of characters, the model used, token counts, cost and latency, together with a random installation identifier generated by the extension. These enforce the free limits and let us operate the Service.
• Account data (signed-in users): e-mail address, the Google account identifier if you sign in with Google, plan and subscription status. Sign-in codes are stored only as hashes and expire after 10 minutes.
• Sessions: for each signed-in browser or extension, a hashed session token, a coarse device label such as “Chrome on macOS”, and when it was created and last used, so you can review and disconnect devices on the account page.
• Payment data: processed by Stripe. We never see full card numbers. We keep the Stripe customer and subscription identifiers, the plan, its status and renewal date.
• Technical data: IP address and browser user-agent in server logs for security, abuse prevention and rate limiting, kept for up to 30 days.
• Product events: events such as “check performed” or “upgrade clicked”, linked to the installation identifier and, when you are signed in, to your account. They contain no text you wrote. We use them to improve the product.

5. Legal bases

Performance of a contract (providing the Service you request), legitimate interests (security, abuse prevention, product analytics) and, where required, consent. Where we rely on legitimate interests you may object at any time.

6. Processors and recipients

• OpenAI (language models, United States) — text processing.
• Stripe (Ireland / United States) — payments.
• DigitalOcean (Frankfurt, Germany) — servers and database.
• Cloudflare — DNS and bot protection (Turnstile).
• Google (Ireland / United States) — only if you choose “Continue with Google”, to confirm your e-mail address.
• Resend, Inc. (United States) — sends sign-in codes.

Where personal data goes outside the UK and the EEA, we rely on an appropriate safeguard: UK adequacy regulations, including the UK Extension to the EU-US Data Privacy Framework, or the UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses.

7. Cookies

The website uses only strictly necessary first-party cookies, and no advertising or analytics cookies:

• sc_session — keeps you signed in; up to 30 days.
• sc_oauth — protects a Google sign-in in progress; 10 minutes.
• sc_vid — a random identifier that applies the free checker’s daily limit to anonymous visitors; 12 months.

8. Retention

Submitted text: not stored, except signed-in history for 90 days and AI chat conversations for 30 days after their last message; you can delete both sooner. Account data: until you delete your account, which removes it at once together with your history, chats, plan records and usage counts. Records of past requests, which never contain your text, then remain only without any link to you. Stripe keeps payment and invoice records for as long as tax and accounting law requires. Server logs are overwritten as they rotate.

9. Your rights

You may access, correct, export or delete your data, restrict or object to processing, and withdraw consent, by contacting info@foresty.me or using the account page, where you can also delete your account yourself. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection, at ico.org.uk or on 0303 123 1113. If you live or work in the EEA, you may also complain to the data protection authority there.

10. Chrome Web Store disclosure

The extension’s use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. We do not sell your data, use it for advertising, or allow humans to read it except with your consent, for security purposes, or to comply with the law.

11. Children

The Service is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.

12. Changes

We will post changes on this page and update the date above; material changes are announced in the extension.