Cheatly Privacy Policy

Last updated: July 11, 2026

Overview

Cheatly ("we", "us") is operated by Lumini Labs, LLC. Cheatly consists of a Chrome extension, a desktop application, the website cheatly.io, and a backend service that uses AI vision to answer questions visible on your screen. This policy describes all user data we collect, how we use it, how it is handled and stored, and every party it is shared with — across the extension, the website, and our backend.

Data We Collect

• Account information — When you create a Cheatly account you provide an email address and a password. Passwords are stored only as salted cryptographic hashes on our backend; we never store plaintext passwords.
• Screenshots of your active tab — When you double-click a question with the extension enabled, a screenshot of the currently visible tab is captured and transmitted to our backend for AI processing. Screenshots may incidentally include personal information visible on the page at the time of capture.
• Selected text — Text near your double-click may be sent with the screenshot to help locate the question.
• Subscription and payment data — Payments are processed by Stripe. We store a Stripe customer identifier and subscription status linked to your account. We never receive or store your full card number.
• Usage data — Our backend records session timing for rate limiting (when your usage session starts and ends) and standard server logs (IP address, request timestamps) for security and reliability.
• Website analytics and advertising data — The cheatly.io website (not the extension) uses Google Analytics, Vercel Analytics, Meta Pixel, and TikTok Pixel, which collect page-view and purchase-event data, including cookies and device identifiers, for analytics and ad measurement.

Data Stored Locally in Your Browser

• Login token — After sign-in, an authentication token is stored in chrome.storage.local so you stay signed in (up to 30 days).
• Extension settings — Display mode and enable/disable state are stored locally in chrome.storage.local.

How We Use Data

• Screenshots and selected text are used solely to generate an answer to the question shown, and are processed in memory only — they are not written to disk or retained on our servers after the answer is returned.
• Account and subscription data are used to authenticate you and verify an active subscription.
• Usage/session data is used for rate limiting and abuse prevention.
• Website analytics and ad-pixel data are used to measure site traffic and advertising performance.

We do not sell user data. We do not use or transfer user data for purposes unrelated to the extension's single purpose (answering on-screen questions) or to creditworthiness/lending decisions.

Parties Data Is Shared With

• OpenAI (api.openai.com) — Screenshots and selected text are forwarded from our backend to OpenAI's API to generate answers, subject to OpenAI's privacy policy. OpenAI's API does not use this data to train its models.
• Stripe — Handles all payments and stores your payment details, subject to Stripe's privacy policy.
• Fly.io — Hosts our backend servers, where account data is stored, subject to Fly.io's privacy policy.
• Vercel — Hosts the cheatly.io website and provides site analytics, subject to Vercel's privacy policy.
• Google Analytics, Meta (Facebook), TikTok — Receive website analytics and ad-conversion events (e.g., page views and purchases) from the cheatly.io website only, not from the extension.

No user data is shared with any other party. We do not share data with data brokers or advertisers beyond the ad-measurement pixels listed above.

Data Storage, Security, and Retention

• All data in transit is encrypted with HTTPS/TLS.
• Account records (email, password hash, Stripe customer ID, session timing) are stored in a database on our backend and retained while your account exists. Contact us to delete your account and associated data.
• Screenshots are never stored — they are processed in memory and discarded after the answer is returned.
• Data stored in your browser is removed when you sign out or uninstall the extension.

Extension Permissions

• activeTab — Capture a screenshot of the current tab when you double-click.
• storage — Save your login token and preferences locally.
• alarms — Automatically disable the extension after a period of inactivity.
• Host permission — Allow the content script to run on webpages where you use Cheatly, and allow the extension to contact our backend.

Children's Privacy

Cheatly is not directed at children under 13. We do not knowingly collect data from children under 13; if you believe a child has provided us data, contact us and we will delete it.

Your Rights

You may request access to, correction of, or deletion of your account data at any time by contacting us. You can cancel your subscription at cheatly.io/account.html.

Changes to This Policy

We may update this policy from time to time. Changes will be reflected in the "Last updated" date above.

Contact

For privacy questions or data requests, email support@cheatly.io or open an issue on our GitHub repository.