ShowKit plugin privacy

Effective October 3, 2026. This notice covers the ShowKit ChatGPT integration in private testing and this public website, operated by sqncs studio LLC.

What the integration sends

For Chrome product flows, the captured product flow and browser session stay on your computer. The plugin builds and previews a sanitized interactive HTML demo using the host’s JavaScript runtime. After you review the exact demo and explicitly approve sharing its visible content, only the finished demo files and local assets are sent to ShowKit for hosting. These files can contain visible names, product text, images and dates. Declining sharing keeps the demo local.

A supported public server recipe captures a public page in a fresh signed-out browser. It cannot use your Chrome login. Any capture sent to a server tool must satisfy its separate public-content policy; private capture files cannot be sent through that route.

ShowKit excludes passwords, cookies, headers, browser storage values, and raw network bodies from demo input. It checks for sensitive and unsupported content before saving a captured flow. These checks do not guarantee that every sensitive value was detected. Review the source and demo content before approving sharing.

Account connection and hosted links

The connection uses your ShowKit account to create demos on your behalf. ShowKit stores account identifiers and hashed authorization grants to operate and revoke the connection. It does not receive your product-site login credentials. Access tokens expire after one hour; refresh grants expire after seven days unless renewed.

Hosted demos are unlisted, not access-protected. Anyone with the link can view the demo. Temporary server build files are removed after the request. Deleting a hosted demo disables its viewer link; deleting a local copy does not remove the hosted version. Service records and provider backups may remain after deletion under the hosted service’s retention policy.

Your agent and service providers

ChatGPT processes your prompts, tool results, and supplied content under its own privacy terms. Authorized browser work contacts the product website. ShowKit uses Firebase and Google Cloud for account authentication, server processing, storage, and hosting.

Hosting providers can process technical request data, such as IP addresses and requested paths. Provider-managed logs follow their retention controls. This public website does not add a separate advertising or analytics script. The hosted account service has its own privacy notice and analytics controls.

Retention and your choices

You can decline capture or sharing, disconnect the integration, and delete hosted demos through your ShowKit account. Disconnecting stops future authorized requests; uninstalling the plugin does not delete existing demos. Standalone local exports remain under your control until you remove them.

Local capture and preview files remain on your computer until removed. Hashed authorization records and service operation records are retained to operate the connection, prevent replay and resolve requests; expiry ends token access but does not automatically delete those records. Contact support to request deletion of retained account data.

If you contact support, we receive the message and contact details you send. We use them to answer and follow up, with our email provider processing the correspondence. Contact us to request access, correction, or deletion. Do not send passwords, tokens, or private customer data.