myDev Kit privacy notice
In short: the free plan needs no account and sends us nothing. Page content stays in your browser. Something from a page leaves it only when you ask a paid AI feature to work on a component you selected, or when you choose to report a bad AI result and press Send.
1. The extension
Where it runs
The extension has no install-time access to any website. It gains access to a tab only when you click its toolbar button or press its shortcut on that tab (Chrome’s activeTab permission), and that access ends when you navigate away or close the tab. If you choose “Always allow on this site”, the extension asks Chrome for an optional permission for that site only; you can revoke it in the extension’s settings at any time.
What it processes, and where
DOM X-Ray, CSS Detective, Component Extractor (all non-AI formats), Breakpoint Hunter and StyleMap read the connected page’s DOM and stylesheets inside your browser. The results are shown in the side panel and are not sent anywhere.
What it stores on your device
- Your settings, saved presets and the sites you chose to always allow.
- The Component Library: components you save, with a picture and the address of the page they came from. It stays in your browser and is never uploaded.
- On a paid plan, a signed token describing your plan and a credential used to refresh it. Both are removed when you sign out.
What it never does
- No analytics, no usage telemetry, no advertising identifiers.
- No page content, page addresses or selectors in error reports or logs.
- No fetching of addresses found on the page; exported code is shown as text, never run.
2. Paid AI features
“AI React + Tailwind component” and “AI token cleanup” run on our servers. When you start one, the extension sends only the selected component’s HTML and the CSS rules that apply to it (size-capped and stripped of scripts, event handlers and embedded data), or for token cleanup, the list of colours, sizes and fonts found. It does not send the rest of the page, the page address, cookies, form values or anything you typed.
- Processing: we pass the input to our AI processing provider, which acts only on our instructions under a data processing agreement and may not use it to train models.
- Inputs are not stored by us. They exist in memory for the duration of the request, unless you send a report (below).
- Outputs are cached for 30 days, keyed by a one-way hash of the input, so repeating the same request is instant and doesn’t use an export. The cache holds the output and the hash, not the input.
- Usage: we count AI exports per account per month. The count is a number; it doesn’t record what was exported.
- Reports you send: under an AI result you can choose “Report a bad export”. Nothing is sent until you pick a reason and press Send, and the form first shows exactly what will be sent: the component’s HTML and CSS (or the token list), the AI’s answer, your reason and your optional comment. We add the date and which version of our AI produced the answer. A report is linked to your account and used only to judge and improve exports. It is deleted automatically after 30 days; write to us to have it deleted sooner.
3. Your account
There is no sign-up and no password. The free plan needs no account at all. When you buy a plan, your account is created from the email you give at checkout, and you sign in later by a one-time link sent to that address. We store:
- Your email address and when the account was created.
- Sign-in links, as a one-way hash, valid for 15 minutes and usable once.
- Sessions (a random identifier with its creation, expiry and last-used time): 30 days on this site, 90 days in the extension.
- Your subscription as reported by Stripe: plan, status, renewal date and the Stripe customer identifier. Your card details go directly to Stripe and never reach us; see Stripe’s privacy policy.
4. This site
This site sets one cookie, mdk_session, only when you sign in. It is HttpOnly, secure, limited to this site and expires after 30 days. There are no tracking or analytics cookies, no third-party scripts and no embedded social widgets.
5. How long we keep it
| Data | Kept for |
|---|---|
| Page content read by the extension | Never leaves your browser |
| AI inputs | Not stored |
| AI outputs | 30 days, keyed by a hash of the input |
| Reports you send about an AI result | 30 days, then deleted automatically |
| Monthly AI usage count | [12 months] for billing questions |
| Account, sessions and subscription state | Until you ask us to delete your account, then removed within [30 days] |
| Component Library, settings and presets | In your browser only, until you delete them or remove the extension |
| Invoices and payment records (Stripe) | As required by tax law, [7 years] |
6. Questions and requests
Your plan and billing are on the billing page. To get a copy of your data or have it deleted, write to privacy@buildella.com from the address on your account. Your rights, and how we handle these requests, are in the Buildella privacy policy.