Privacy policy

Last updated: 23 August 2026. Contact: harun@harunsekmen.com

This policy covers the SlashKit Chrome extension and optional SlashKit Cloud at slashkit.harunsekmen.com, operated by Harun Sekmen.

Limited Use

SlashKit uses user data only to provide its single purpose: a private slash-command snippet palette. Data is not sold, not used for advertising, not used for creditworthiness, and not transferred except as needed to run the product, comply with law, or handle a merger. Humans do not read user content except with consent, for security/abuse, or as required by law.

What the extension stores locally

Snippets, folders, settings, usage counts, and optional local insights stay in Chrome’s storage.local on this device. Insights never include URLs, snippet bodies, or form values. Uninstalling the extension deletes this storage. You can also export or restore a JSON backup from Options.

Site access is optional. After you click Enable on this site (or Enable on all sites), an isolated content script reads text immediately before the caret only to detect “/” and insert the snippet you choose. That text is not stored and is not sent to SlashKit Cloud. Password, one-time-code, and payment fields are excluded.

Optional SlashKit Cloud

Cloud is off until you create an account and sign in from Options → Cloud. Then we store:

• email and a scrypt password hash (not the password itself);
• a public handle and account role;
• library copies you explicitly sync;
• snippets you submit for catalog review;
• ratings and install counts for published listings;
• device refresh tokens until you sign out or delete the account.

Page contents, browsing history, and caret text are never uploaded unless you share a snippet you authored. The content script never calls the network. Cloud traffic uses HTTPS to slashkit.harunsekmen.com only.

How we use data

Local data powers search, insert, ranking, and settings. Cloud data powers sign-in, private sync, catalog review, ratings, and install-to-local. We do not use data for ads or profiling.

Sharing

We do not sell data. Hosting is on a server we operate. Published catalog snippets are visible to other signed-in users. We may disclose data if required by law or to investigate abuse.

Security

Cloud traffic is HTTPS. Passwords are stored as scrypt hashes. Chrome local storage is not an encrypted vault; do not store secrets in snippets.

Retention and deletion

Local data remains until you delete snippets, clear insights, restore a backup, or uninstall. Cloud accounts remain until you delete them from the Cloud site (Account → Delete) or the extension Cloud tab. Deleting a Cloud account removes your login, library, pending submissions, ratings, installs, and tokens. Already published catalog listings may remain without your login.

Children

SlashKit is not directed at children under 13. Do not create an account if you are under 13.

Changes

Material changes will be posted on this page with a new date.