Orbit legal

Privacy Policy

This policy explains what Orbit processes, why it is needed, and the choices available to you.

Effective August 12, 2026 · Last updated August 28, 2026

Orbit is a browser extension and related service operated by Gluckz ("Orbit," "we," "us," or "our"). This policy applies to the Orbit extension, Orbit API, and this website.

1. Information Orbit processes

Information you submit

  • Conversation content: prompts you enter and responses produced for you.
  • Page context you attach: page title, URL, extracted readable text, selected text, and a screenshot of the visible tab when available.
  • Files you attach: supported images, PDFs, text, Markdown, CSV, or JSON files deliberately added to a request.
  • Support communications: information you include when contacting us.

Service and billing information

  • Installation identifier: a random local credential whose one-way hash authenticates service requests.
  • Google account information: Google account identifier, email, display name, and profile image URL. Orbit never receives your Google password.
  • Agreement records: accepted Privacy Policy and Terms versions and acceptance time.
  • Usage information: plan, subscription status, daily and monthly counts, response mode, token totals, and timestamps.
  • Conversation organization: Space names, conversation titles, message text, attached page title and URL, and timestamps.
  • Billing records: Stripe customer and subscription identifiers and state. Orbit does not receive complete card numbers.
  • Operational data: request identifier, route, status, duration, and transient IP-based abuse-prevention signals.

2. When Orbit reads a webpage

Orbit does not continuously read or record browsing activity. Chrome grants Orbit temporary access only to the active tab where you invoke the extension. Orbit uses that temporary access only when you choose Attach current page to extract readable content and capture the visible tab for the request you initiated. Chrome revokes the access when you navigate away or close the tab. Browsers block access to internal pages, extension stores, protected viewers, and other sensitive surfaces.

3. How information is used

  • Generate and stream AI responses requested by you.
  • Maintain conversation history, Spaces, preferences, subscription access, and plan limits.
  • Prevent abuse, diagnose failures, and secure the service.
  • Process purchases, renewals, cancellations, and support requests.

Orbit does not sell personal information or use attached page content for advertising profiles.

4. AI processing and providers

Orbit sends the content needed for a request—including prompts and page context, screenshot, or files you attach—through a Cloudflare-hosted API to Google's Gemini API. Providers include Google Gemini for inference, Cloudflare for API/database infrastructure, Stripe for subscriptions, and GitHub Pages for this website.

Orbit's use and transfer of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including Limited Use requirements.

5. Storage and retention

Conversation messages, Spaces, metadata, usage records, installation records, and subscription identifiers are stored in Orbit's Cloudflare database. Attached file and visible-tab screenshot bytes are forwarded for the active request and are not written to Orbit's conversation database.

Conversations and installation usage records remain until you delete them, sign out of that browser installation, or delete your Orbit account. Signing out retires that installation and deletes its conversation history and Spaces. Delete account immediately cancels active Orbit subscriptions and removes the account, linked installations, conversations, Spaces, agreement records, and usage counters from Orbit's operational database. Stripe may retain transaction records where required for tax, accounting, disputes, fraud prevention, or law.

6. Your choices

  • Do not attach content you do not want processed.
  • Navigate away from or close a tab to revoke Orbit's temporary active-tab access.
  • Delete conversations or Spaces individually.
  • Sign out to retire the current installation and its conversation history.
  • Manage a subscription through Stripe's customer portal.
  • Delete your Orbit account from the account menu; this is permanent and immediately cancels active Orbit subscriptions.
  • Uninstalling removes local extension data but does not itself delete server-side account or billing records.

7. Security

Orbit uses HTTPS, server-side provider credentials, authorization checks, request validation, quotas, and platform controls. No online service can guarantee absolute security. Do not share passwords, payment-card details, private keys, or content you are not authorized to process.

8. Children

Orbit is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

9. Legal disclosures and changes

Information may be disclosed where reasonably necessary to comply with law, protect users, investigate fraud or abuse, or enforce agreements. We may update this policy as Orbit changes and will revise the date above.

10. Contact

For privacy questions or verified access/deletion help, visit Orbit Support. Never send passwords, API keys, payment-card details, Google credentials, or an Orbit bearer token.