The short version
- ShopInline has no server of its own. We do not run analytics or tracking, show ads, or receive any of your data.
- Your keys and settings are stored only in your browser.
- Your product data goes to your own store. It goes anywhere else only when you use an optional feature that needs it, as listed below.
- When you ask a question about your store's figures, those figures go to Google Gemini with your own key, as totals only: never a visitor, an order or a customer.
- We do not sell or share data, and we do not use it for anything other than editing your products.
What is stored in your browser
Stored with chrome.storage on your device. Nothing here is synced to other devices or sent to us.
- Your stores: each store's address, its WooCommerce REST API keys (Consumer Key and Secret) and, if you add one, a WordPress Application Password used to upload images.
- Settings: interface language, editor layout, AI preferences and, if you add one, your Google Gemini API key.
- Google connection (optional): which Google Analytics 4 property and Search Console site belong to which store, and the email of the Google account you connected. The Google sign-in token is kept only for the current browser session and is discarded when the browser closes.
- Cached figures: sales and analytics numbers shown on product cards, kept for up to 12 hours so pages load faster.
Removing the extension deletes all of it. You can also remove a store or disconnect Google from the extension's settings at any time.
What is saved in your store
Your edits are saved to your own WooCommerce store, which is the point of the extension. With each edit, ShopInline also adds an entry to that product's change log, stored in your store as product data. The entry records what changed, when, and the email address of the Chrome profile that made the change, read through the Chrome Identity API. This lets a shop with several editors see who changed what. The log lives only in your store, which you control.
Where data is sent, and when
All requests go directly from your browser to the service named. None pass through us.
| Recipient | What is sent | When | Use |
|---|---|---|---|
| Your WooCommerce store | Product reads and edits, images, and sales reports, authenticated with your keys | Whenever you use the extension on your store | Core |
Google Gemini APIgenerativelanguage.googleapis.com |
Product title and text, your instructions, and for alt text, a reduced copy of the product photos. Sent with your own API key | Only when you ask for AI writing, SEO text or alt text | Optional |
Google Gemini API, for questionsgenerativelanguage.googleapis.com |
Your question, the earlier questions and answers in the same conversation, and the store figures it is about: product and category names with units sold, orders and revenue from your store's sales reports; visits, engagement and the device split from Google Analytics; the most-used search terms; menu labels and their clicks; and the page you are on (its address and title, and for the This page tab, how its visits arrived: channels, referring sites and pages, campaign names). Totals only, never a single visitor, order or customer. Sent with your own API key | Only when you send a question in the Ask tab, or press "Ask about this" on a figure | Optional |
| Chrome's speech recognition service (Google) | Your voice while you dictate a question, turned into text by Chrome itself; ShopInline never receives the audio | Only while the microphone is on in the Ask tab | Optional |
| Google Analytics 4, Search Console and Google sign-in | Read-only requests for your own properties' reports | Only after you connect Google, and when you view sales and traffic figures or ask a question about them | Optional |
Public image hostsuguu.se, kappa.lol, catbox.moe, 0x0.st |
An edited product image, or a copy of an image link you add | Fallback only, and only after you agree in the prompt: when an image cannot be uploaded straight into your store's media library, or an image link cannot be read | Fallback |
img.ly CDNstaticimgly.com |
Nothing about you; the background-removal model is downloaded from it | First use of background removal | Optional |
About the image hosts
When ShopInline cannot put an edited image directly into your store's media library, for example because your site blocks direct uploads, it can place the image on one of the free public hosts above so WooCommerce can import it from a link. The same hosts are used to fetch a readable copy of an image link you add when the server behind that link refuses to share it. An image placed there can be opened by anyone who has the link, and is kept according to that host's own terms.
ShopInline asks you before it sends any image to these hosts, and sends nothing if you decline. If you tick "Don't ask again", you can turn the question back on under Settings → Image uploads in the extension popup. To avoid this route entirely, stay logged in to WordPress in the same browser, or add a WordPress Application Password in the store's settings, so images upload straight to your store.
Speaking a question
The microphone button in the Ask tab uses the speech recognition built into Chrome. Chrome sends your voice to Google's speech service to turn it into text, and that text appears in the question box for you to read and send. ShopInline does not record, store or receive the audio, and does not use your Gemini key for this. Chrome asks you for microphone access for your store's website the first time; ShopInline itself has no microphone permission.
On your device only
Background removal and Chrome's built-in AI (used for alt text when available) run on your own computer. The images they process are not uploaded anywhere for this.
Third-party terms
Data you choose to send to Google is handled under the Google Privacy Policy and the Gemini API Additional Terms. Note that when you use a free-tier Gemini key, Google may use the content, including the store figures sent with a question, to improve its products.
Google user data
If you connect Google, ShopInline asks for read-only access to Google Analytics (analytics.readonly) and Search Console (webmasters.readonly), plus your basic profile (openid, email). It uses this only to show visits, conversion and search queries for your own products inside the extension, and to explain them when you ask. This data stays in your browser and is never transferred to us; no copy of it ever passes through us.
The one transfer is one you ask for. When you send a question in the Ask tab, or press "Ask about this" on a figure, the Analytics and Search Console figures that question is about are sent, together with your question, to the Google Gemini API under your own API key, so Gemini can answer it. Nothing is sent until you ask. What is sent is aggregated totals for your own store (visits, engagement, devices, channels, referring sites, campaign names, search terms), never data about an individual visitor. Google user data is not sold, not used for advertising, and not used for anything other than showing and explaining your own store's figures to you.
ShopInline's use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Disconnecting Google in settings revokes the token.
Permissions, and why
- storage: saves the settings described above on your device.
- activeTab: lets the popup see which site you are on, and lets the keyboard shortcut open the editor on that tab.
- scripting: loads the editor into tabs of a store you have just connected, and runs the optional "Create keys for me" step on your store's WooCommerce settings page.
- contextMenus: adds the right-click "Assign to WooCommerce Field" menu on your stores.
- offscreen: runs on-device background removal.
- identity: signs in to Google when you connect Analytics, and reads your Chrome profile email for the change log.
- Host access: fixed access to Gemini and the image hosts listed above. Access to your store's own website is asked for separately, one store at a time, when you add it.
Children
ShopInline is a tool for store owners and is not directed at children under 13.
Changes
If this policy changes, the new version will be posted here with a new date. A change that affects what data leaves your device will also be noted in the extension's release notes.