Privacy Policy

1. Overview

ClickGuide is a Chromium browser extension with a companion web app for creating screenshot-based step-by-step guides from web workflows. This policy explains which data ClickGuide processes, where it is stored and when it leaves your device.

In short: you decide what you record and share. ClickGuide can be used entirely with local browser storage. Cloud synchronization and AI features are optional and only used when you explicitly enable or trigger them.

The controller responsible for data processing is named in the Imprint.

2. Local data in your browser

ClickGuide can store your guides locally in your browser's extension storage. This data stays on your device unless you enable cloud synchronization or export or share a guide yourself. Locally stored data can include:

• guide titles and step texts
• screenshots, including crop, blur and annotation settings
• images you upload into a guide
• GIF recordings of short demonstrations
• audio and transcription information, if you use voice input
• local settings such as language and capture preferences
• an optional OpenAI API key you enter for local use (see section 6)

You can delete local guides in the extension at any time. Uninstalling the extension removes its local storage from your browser.

3. Web page access and screenshots

To document a workflow, ClickGuide needs access to the content of the web page you are currently documenting. This access is used so that you can:

• capture clicks and interactions,
• recognize the user interface elements you interact with (for example button labels),
• create screenshots of the visible tab and short GIF recordings,
• turn these interactions into documented workflow steps.

This access serves exclusively the documentation process you start. Website access is granted only after you explicitly activate ClickGuide for the current tab. ClickGuide does not request global access to all websites, does not collect a general browsing history and does not use page access for advertising, tracking or profiling. ClickGuide does not intentionally store values you type into form fields as step metadata.

Screenshots show whatever is visible on the page at the moment of capture. Please review your screenshots before sharing and use the blur tool to hide sensitive information.

4. ClickGuide Cloud (optional)

If you sign in with a ClickGuide account, your guides can be synchronized between devices. Data flows as follows:

1. Browser extension
2. Local cache in your browser
3. ClickGuide Cloud server
4. Database (MariaDB) for guide metadata and texts
5. Server file system for screenshots, images and GIFs

Media files are stored as files in a protected directory on the server and are not stored as binary data in the database. Guides remain available locally; if two devices change the same guide, ClickGuide creates a conflict copy instead of silently overwriting data.

Without signing in, no guide data is sent to ClickGuide Cloud.

5. Account data and passkeys

If you have a ClickGuide account, we process:

• your email address and user account,
• authentication and session data, stored in protected form,
• passkey information (public key credentials) if you register a passkey,
• account settings.

Your login can be remembered for up to 30 days. The web app uses only technically necessary session storage to keep you signed in; it does not use tracking or advertising cookies.

ClickGuide supports passkeys and biometric sign-in through the WebAuthn/passkey features of your browser and operating system. Biometric verification such as a fingerprint or face scan takes place on your device. ClickGuide never receives or stores biometric data; it only stores the public key of your passkey.

6. AI features (OpenAI)

AI features are optional. The core capture and guide creation work without AI. When available, AI can be used for:

• speech transcription,
• improving step descriptions,
• preparing recorded content.

For signed-in users, communication with OpenAI takes place server-side through ClickGuide Cloud. Depending on the configuration, a shared API key provided by the administrator, your own API key, or no key (AI disabled) is used. API keys are stored encrypted on the server using AES-256-GCM and are never returned to the browser extension.

When using ClickGuide locally without an account, you can enter your own OpenAI API key as a fallback. It is stored in your browser's extension storage, and requests are sent directly from your browser to OpenAI.

OpenAI processes this data according to its own terms and privacy policy (openai.com/policies/privacy-policy). OpenAI may process data outside the European Union.

7. Sharing guides

You can share guides through the web app via a share link. Share links can optionally be protected with a password. Anyone with the link (and password, if set) can view the shared guide, including its screenshots.

You decide what you record and what you share. Exports (HTML, rich content, Markdown or Notion-compatible packages) are created on your device and are handled by you.

8. Data transfer and security

All communication with ClickGuide Cloud and with AI APIs takes place exclusively over encrypted HTTPS connections. API keys are encrypted at rest using AES-256-GCM. Uploaded media is stored in a directory that is protected against direct public access.

9. No advertising, no data sale

• ClickGuide does not show personalized advertising.
• ClickGuide does not sell user data.
• ClickGuide does not share user data with data brokers.
• This website uses no analytics or tracking services.

10. Chrome Web Store Limited Use

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

ClickGuide uses data accessed through the extension only to provide and improve its single purpose — creating step-by-step guides — and does not transfer this data to third parties except as described in this policy, when necessary to provide a feature you use (such as optional AI processing), or when required by law.

11. Data deletion and your rights

You can delete individual guides in the extension and, when signed in, in the web app. To request deletion of your ClickGuide account and all associated cloud data (guides, screenshots, images, GIFs, passkeys and stored API keys), send an email from the address associated with your account to:

mail@clickguide.me

Please use the subject line "Account deletion". We will confirm the request and delete your account and cloud data without undue delay. Locally stored guides are not affected and can be removed in the extension or by uninstalling it.

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to lodge a complaint with a data protection supervisory authority.

12. Contact and changes

For privacy questions, contact mail@clickguide.me or the provider named in the Imprint. We may update this policy when ClickGuide changes; the date at the top shows the latest version.