Last updated: May 21, 2026 · Effective: May 21, 2026
This Privacy Policy explains how Context (the "Extension"), provided by Histatical, LLC, a United States limited liability company ("we," "us," "our"), collects, uses, stores, shares, and protects your information when you use our Chrome extension and related services (collectively, the "Services").
Histatical, LLC is the data controller for personal data processed in connection with the Services. Questions? Contact jack@histatical.com.
Context is a Chrome extension that captures audio from your active browser tab, transcribes it in real time, and extracts key terms, people, concepts, and insights to display in a sidebar. It works on any website that plays audio — including video platforms (YouTube, Netflix, Twitch), audio platforms (Spotify, SoundCloud, Google Podcasts), educational sites (Coursera, Khan Academy, Udemy, TED), news and finance sites (CNBC, Bloomberg, news streams), meeting tools, lecture recordings, and any other browser tab where audio plays.
Because audio can play on virtually any website, Chrome requires the Extension to request broad host permissions. The Extension only captures audio and reads page metadata when you explicitly start a Context session on a tab. Until you start a session, no audio is captured, no transcript is generated, and no information about the page is sent to our servers.
We collect only the data necessary to deliver the Extension's functionality. The categories below cover everything we collect.
When you activate Context on a tab, we capture the audio playing in that tab using Chrome's tabCapture API. This audio is streamed in real time to our transcription provider (see Section 4). Audio is never recorded, saved, or stored — on your device or on any server — at any point in the pipeline.
Transcripts produced from your tab audio are sent in real time to our language-model provider for entity and insight extraction (see Section 4). Full transcripts are not stored on our servers or on the providers' servers beyond the lifetime of each API request.
The following data is stored in your browser's local storage (chrome.storage.local) and never leaves your device unless you explicitly export it:
We do not record URLs or page titles for pages where you have not started a Context session. We do not track your general browsing history.
Google sign-in is optional. If you sign in:
openid, email, profile)chrome.storage.local.If you subscribe to a paid plan, payment is processed by Stripe. Stripe collects and stores your payment-method details (card brand, last four digits, expiration, billing address) directly on their PCI-compliant infrastructure. We do not see, store, or have access to your full card number or CVC.
What we store on our own servers (Supabase) about your subscription:
You can cancel your subscription at any time. Upon cancellation, your subscription record is retained for up to 7 years for tax and accounting purposes as required by U.S. law; you may request earlier deletion of non-required fields.
If you opt in to "Help improve Context" in Settings, we collect anonymous usage events to improve the product. These events contain:
These events contain no transcripts, no entity data, no audio, no URLs, and no personally identifiable information. Analytics are off by default; you can opt out at any time in Settings.
We use the data described above only for the following purposes:
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Tab audio | Real-time transcription to deliver the core feature | Performance of a contract |
| Transcripts | Entity and insight extraction to deliver the core feature | Performance of a contract |
| Session history (URL, title, timestamp) | Let you revisit prior sessions and the entities they generated | Performance of a contract |
| Locally stored knowledge base & settings | Provide accumulated knowledge across sessions and personalize the Extension | Performance of a contract |
| Account data | Authenticate you, display your avatar, sync preferences across devices | Performance of a contract / Consent |
| Subscription & billing data | Process payments, enforce plan limits, send service notices | Performance of a contract / Legal obligation (tax records) |
| Anonymous analytics | Improve product quality and reliability | Consent (opt-in) |
We do not use your data for any other purpose without your explicit consent.
We share data only with the service providers strictly required to deliver the Extension. Each provider acts as a processor on our behalf and is contractually bound to handle your data securely.
We do not share your data with any other third party except (a) when required by law (subpoena, court order, valid legal request), (b) to protect the rights, property, or safety of users or the public, or (c) in connection with a merger, acquisition, or sale of assets, in which case you will be notified before your data is transferred.
| Data | Storage location | Retention |
|---|---|---|
| Tab audio | Streamed in transit only; not stored | Not retained |
| Transcripts | Processed in transit only; not stored on our servers | Not retained |
| Session history (URLs, titles, timestamps), entities, knowledge base, settings | Your device, in chrome.storage.local | Until you clear it, uninstall the Extension, or clear Chrome data |
| Account data (name, email, profile picture URL) | Supabase, US (us-west-2, Oregon); cached copy in chrome.storage.local | Until you delete your account or request deletion |
| Subscription records (Stripe customer ID, status, usage counters) | Supabase, US (us-west-2, Oregon) | Up to 7 years post-cancellation, as required for U.S. tax and accounting |
| Payment-method details (card brand, last 4, etc.) | Stripe (we do not store these ourselves) | Per Stripe's retention policy |
| Anonymous analytics | Supabase, US (us-west-2, Oregon) | 12 months from the event date, then permanently deleted |
| Rate-limit counters | Upstash | 24 hours (rolling window) |
You can clear all locally stored data at any time using the "Clear" button in the extension sidebar.
Our service providers primarily process data in the United States. If you access the Extension from outside the United States — including from the European Economic Area, the United Kingdom, or Switzerland — your data may be transferred to and processed in the United States, which has different data-protection laws than your home jurisdiction.
When data is transferred internationally, we rely on appropriate safeguards including the European Commission's Standard Contractual Clauses (SCCs) with each processor, and we ensure each processor maintains GDPR-compliant data-handling practices.
No method of transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.
Depending on where you live, you may have the following rights regarding your personal data:
For California residents (CCPA/CPRA): You also have the right to know what categories of personal information we collect, the right to delete personal information, the right to correct inaccurate personal information, and the right not to be discriminated against for exercising these rights. We do not sell or share personal information as defined under California law.
To exercise any of these rights, email jack@histatical.com. We will respond within 30 days. You can also clear most of your local data directly using the "Clear" button in the sidebar or by uninstalling the Extension.
Context is not directed to children under 13 (or under 16 in the European Economic Area). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact jack@histatical.com and we will delete it promptly.
chrome.storage.local).<all_urls>) — required for the Extension to inject its sidebar and capture audio on whichever site you choose to use it on, since audio can play on virtually any website. The Extension does not read page content or transmit any data from any site unless you explicitly start a Context session on that tab. Additional narrow host permissions for wss://api.deepgram.com (transcription) and https://www.googleapis.com (sign-in) cover those service connections.We request the narrowest set of permissions required to deliver the Extension's functionality.
By installing and using the Extension, you consent to this Privacy Policy. Before any audio is captured for the first time, the Extension displays an in-product disclosure explaining that audio will be streamed to Deepgram for transcription and that transcripts will be sent to Anthropic for analysis. You must affirmatively confirm this before any data leaves your browser.
You can withdraw consent at any time by:
We may update this Privacy Policy from time to time. When we do, we will:
Your continued use of the Extension after changes take effect constitutes acceptance of the updated policy.
Context's use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Specifically:
Questions, requests, or complaints regarding this Privacy Policy or your data:
Histatical, LLC
Email: jack@histatical.com
We aim to respond to all inquiries within 7 business days, and to formal data-subject requests within 30 days.