Privacy Policy
Effective October 18, 2026 · Updated October 20, 2026
QueryPilot is a Chrome extension that helps you write and optimize PostgreSQL queries from Chrome’s side panel. It is 100% client-side: QueryPilot has no servers, no user accounts and no analytics, and its developer never receives your API keys, database schemas, prompts or generated SQL.
Summary
| Data | Where it is stored | Who it is sent to |
|---|---|---|
| AI provider API keys (Google Gemini, Anthropic, OpenAI) | chrome.storage.local on your device | Only the provider the key belongs to, with each request you make |
| Database schemas you paste (table names, column names, data types) | chrome.storage.local on your device | Only the AI provider you selected, as context for your request |
| Your prompts, pasted SQL and EXPLAIN ANALYZE output | Not stored after the request; held in memory while the panel is open | Only the AI provider you selected |
| PRO license key | chrome.storage.local on your device | Polar.sh, to validate the license |
| Settings and daily usage counter | chrome.storage.local on your device | Nobody |
Data the extension handles
Authentication information
To generate SQL, you enter your own API key for Google Gemini, Anthropic (Claude) or OpenAI (“bring your own key”).
The key is saved only in the extension’s local storage (chrome.storage.local) on your computer. It is not synced
to your Google account, and it is sent only to the provider it belongs to, in the authorization header of the requests you trigger.
The key is stored unencrypted. Chrome’s extension storage is not encrypted, so anyone or any software with access to your computer’s Chrome profile could read it. We recommend using an API key with a spending limit, and you can delete it from Settings at any time.
If you buy QueryPilot PRO, your license key is also saved in chrome.storage.local and sent to Polar.sh to check that it is valid.
Content you provide
You may paste your database schema (table names, column names and data types), natural-language requests, SQL statements and
EXPLAIN ANALYZE output. Schemas are saved in chrome.storage.local so you can reuse them as “projects”.
Prompts, pasted SQL and query plans are not stored after the request completes.
QueryPilot never connects to your database and never reads the rows in your tables.
Web pages you visit
QueryPilot runs a small script only on SQL editor pages: the Supabase SQL Editor
(supabase.com/dashboard/project/*/sql/*), the Neon Console SQL Editor and local pgAdmin 4 pages
(/browser/ and /sqleditor/ on localhost and 127.0.0.1). It is not loaded on other
dashboard pages, such as Supabase’s API keys or settings pages, and it refuses to act if you navigate away from the editor.
The script only tracks which editor field you last clicked, so it knows where to insert SQL when you press “Insert into editor”.
It does not read, collect or transmit page content.
Who receives data
- The AI provider you choose (Google, Anthropic or OpenAI) receives your request, the schema of the selected project and your API key, directly from your browser over HTTPS. Their own privacy policies and terms apply: Google, Anthropic, OpenAI. On Google Gemini’s free tier, Google may use the content you send to improve its products, so avoid sending sensitive information on that tier.
- Polar.sh, our merchant of record, receives your license key when it is validated (when you activate it and at most once a day afterwards). When you buy PRO, Polar collects your payment and billing details on its own checkout page under the Polar privacy policy. QueryPilot never sees your card details.
No other third party receives data from the extension. QueryPilot has no backend of its own.
What we do not do
- We do not sell or transfer user data to third parties, outside of the approved uses above.
- We do not use or transfer user data for purposes unrelated to QueryPilot’s single purpose: helping you write and optimize SQL.
- We do not use or transfer user data to determine creditworthiness or for lending purposes.
- We do not use or transfer user data for personalized, retargeted or interest-based advertising.
- No person reads your data. We never receive it, so there is nothing for anyone at QueryPilot to see.
- We do not use analytics, tracking or fingerprinting, and we do not load remote code.
QueryPilot’s use of information complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.
Retention and deletion
Everything QueryPilot stores stays on your device until you delete it. You can remove a project or clear your API key and license in the extension’s Settings. Uninstalling the extension deletes all of its local data. Because we never receive your data, there is nothing for us to delete on our side; data sent to an AI provider or to Polar is governed by their retention policies.
Security
All network requests use HTTPS. Data in chrome.storage.local is protected by your operating system account and Chrome profile,
so anyone with access to your unlocked computer profile could read it. Use API keys with spending limits where your provider supports them.
Children
QueryPilot is a developer tool and is not directed at children under 13. We do not knowingly collect data from children.
Changes
If this policy changes, we will update this page and the effective date above. Material changes will also be noted in the extension’s release notes.
Contact
Questions about privacy: gonzagq26@gmail.com