The short version
What you type stays on your device. Confirm’s checks — the built-in rules and the AI review — run inside Chrome on your own computer. The text of your emails, messages, posts and forms is never sent to Confirm’s servers or to any third party.
What Confirm reads
Only the text field you are typing in, on sites where you have allowed Confirm to run, and — when you are replying and have “Use the conversation” on — the single message you are replying to. It never reads password fields, card-number fields or one-time codes, and it never reads the rest of the page.
Where the checking happens
- Local rules (dates, attachments, links, secrets, formatting) run in the page, in JavaScript, with no network access.
- AI review uses Gemini Nano, the model built into Chrome, through Chrome’s Prompt API. It runs on your device. Chrome downloads the model once; Confirm never sends it your text.
- Anything that looks like a password, an API key, a card number or a Social Security number is masked before the AI sees it.
- Recent results are cached in memory for up to 20 minutes so unchanged text isn’t checked twice. The cache is cleared when Chrome closes.
What the Confirm server stores
Only what an account needs, and never your writing:
- A one-way hash of your email address as your account id — the address itself is not stored.
- How many AI reviews you ran today, to apply the free daily limit. This count expires within three days.
- Whether you bought Confirm Premium, and the Stripe payment reference for it.
- If you sign in, your Confirm settings — toggles, categories, muted issue types and the sites where you turned Confirm off — so they follow you to another browser.
- Anonymous counts — for example “a date issue was found on an email” — with no text, no address and no account attached.
Payments
Payments are handled by Stripe. Confirm never sees your card details. Stripe’s privacy policy applies to the checkout page.
Signing in
Sign-in uses Google. Confirm receives your verified email address once, to create your account token, and does not keep Google’s token.
No selling, no ads, no training
Confirm does not sell data, show ads, or use anything you write to train models. Data is used only to provide the checks you turn on.
Your controls
- Turn AI review off and Confirm runs local rules only.
- Turn Confirm off on any site, or everywhere, from the toolbar button.
- Choose where Confirm can run: all sites, sites you pick, or only when you click it.
- “Clear local data” in Settings removes cached results and counts. Signing out removes your account token from the browser.
Questions: use the contact address on the Chrome Web Store listing. Effective September 25, 2026.