Reduz Reduz

Reduz · Legal

Privacy Policy

How Reduz handles local extension data, hosted summaries, accounts, and billing.

Last updated June 9, 2026

Reduz ("we", "us", "our") is a browser extension and website that summarizes web pages, PDFs, YouTube videos, and selected text using AI providers. This Privacy Policy describes how data is handled across the Reduz extension, hosted summary features, account features, and the reduz.app website, operated by Three Things Media.

Interpretation and Definitions

Definitions

  • Extension — the Reduz Chrome browser extension.
  • Website — the Reduz marketing site at reduz.app.
  • Service — the Extension and Website collectively.
  • Personal Data — any information that relates to an identified or identifiable individual.
  • You — the individual using the Service.
  • AI Provider — a third-party API service or hosted model provider used to generate summaries.
  • BYOK mode — the Extension mode where you use your own AI provider key and requests go directly from your browser to that provider.
  • Hosted mode — the mode where Reduz processes summaries through its hosted relay and hosted AI providers.

Data Controller

Three Things Media
Härtingerstr. 29
85051 Ingolstadt, Deutschland
Email: support@reduz.app

What Stays on Your Device by Default

By default, the Reduz extension stores summaries and generated outputs on your device. It does not save original webpage HTML, original PDFs, or uploaded files by default. Local extension data includes:

  • BYOK provider keys — stored in browser extension local storage; not transmitted to Reduz servers.
  • Summary history and generated outputs — stored in a local SQLite database (OPFS), including summary text, source URL, title, provider used, model, token usage, timestamps, and, when available, extracted reader text or transcripts used for history, source review, and export features.
  • Settings and preferences — active provider, selected models, output language, custom prompt sets.
  • Session data — temporary summary run snapshots, automatically cleared after 5 minutes of inactivity.

The current extension PDF path uses extracted PDF text to generate the summary but does not save that PDF text in local history by default. Extension history and settings stay local unless a future backup or sync feature is explicitly enabled.

BYOK Data Flow

When you summarize in BYOK mode, the Extension:

  1. Extracts text content from the active tab (webpage, YouTube transcript, or PDF).
  2. Sends the extracted text, page title, URL, and your chosen prompt directly to your selected AI provider.
  3. Receives the summary response via streaming.

In BYOK mode, this data goes directly to the AI provider you selected and does not pass through Reduz servers. Your API key authenticates the request. We do not see, log, or store content summarized through BYOK mode.

Hosted Summary Data Flow

When you use Reduz Free or a paid hosted plan, extracted source text, source metadata, and your selected prompt are sent to the Reduz hosted relay and then to a hosted AI provider so the summary can be generated. Reduz uses account, installation, usage, and request metadata to enforce credits, entitlements, rate limits, abuse controls, billing, reliability, and support.

The hosted relay is designed not to log raw source text or generated summary content outside the account-backed features needed to operate the product. Reduz Hosted cloud history saves completed generated outputs, extracted source text, source title, source URL, content type, favicon, prompt ID, timestamps, and generation duration so you can review prior work from your account until you delete it or account retention rules apply. Hosted usage records may also include status, timestamps, credit cost, token counts, approximate cost, content type, prompt ID, installation ID, account ID when signed in, and error metadata.

Web App Source Inputs

When you paste text or upload a document in the Reduz web app, Reduz processes that source through Reduz infrastructure and hosted AI providers for the action you choose. By default, Reduz does not save pasted text, uploaded files, or extracted document text after the action completes or the temporary processing window expires.

Reduz may save generated outputs, minimal source metadata such as title, URL, file type, and size, plus usage, billing, abuse-prevention, reliability, and support metadata.

Backup and Sync

Backup and sync are not part of the current public BYOK extension promise. If Reduz later offers encrypted backup or sync, it will be optional and documented separately before use. Backup does not mean Reduz stores original webpage HTML, original PDFs, uploaded files, or web app source inputs by default.

AI Provider Data Flows

Depending on which provider or hosted route is used, content may be sent to providers such as:

We strongly recommend reviewing the privacy policy of your chosen AI provider. We have no control over how they process the data you send via their APIs.

YouTube Data

When summarizing YouTube videos, the Extension fetches transcripts, captions, and available page metadata from the open YouTube page. Reduz does not ask for or store a separate user-supplied YouTube Data API key.

Website, Account, and Billing Data

The reduz.app website may process:

  • Cookies — see our Cookies Policy for details. We use only essential cookies (consent preferences, color mode).
  • Account data — email, profile information from your auth provider, session state, and account identifiers.
  • Billing data — shared accounts service customer and subscription identifiers, plan, status, renewal period, and entitlement metadata. Payment card details are handled by Stripe and are not stored by Reduz.
  • Hosted usage data — credits, usage period, request counts, token counts, approximate cost, status, and abuse-prevention metadata.

The website does not currently run third-party analytics, telemetry, tracking pixels, or advertising scripts.

Legal Basis for Processing (GDPR)

Where we process Personal Data, we rely on the following legal bases:

  • Legitimate interest — to operate and improve the Service.
  • Consent — where you choose optional features or settings that require consent.
  • Legal obligation — to comply with applicable laws.

Your Data Protection Rights (GDPR)

If you are in the European Economic Area, you have the right to:

  • Access — request copies of your personal data.
  • Rectification — request correction of inaccurate data.
  • Erasure — request deletion of your data.
  • Restrict processing — request that we limit how we use your data.
  • Data portability — request transfer of your data in a structured format.
  • Object — object to our processing of your data.
  • Withdraw consent — withdraw consent at any time where processing is based on consent.

For local extension data, you can export your history as a ZIP file, clear all data from settings, or uninstall the Extension. For account, billing, or hosted usage data, contact us using the details below.

California Privacy Rights (CCPA)

California residents have additional rights under the CCPA:

  • Right to know what personal information is collected and how it is used.
  • Right to delete personal information.
  • Right to opt out of the sale of personal information — we do not sell personal data.
  • Right to non-discrimination for exercising your privacy rights.

International Data Transfers

In BYOK mode, your content is sent directly from your browser to your chosen AI provider's servers. In hosted mode, content is processed by Reduz infrastructure and hosted AI providers. These servers may be located outside your country of residence. Please review your AI provider's privacy policy for information on where they process data.

Data Retention

  • Local extension data — retained on your device until you delete it or uninstall the Extension.
  • Hosted cloud history — completed generated outputs, extracted source text, source metadata, prompt metadata, timestamps, and generation duration are retained until you delete the history item or account retention rules apply.
  • Other web app source inputs — pasted text, uploaded files, and extracted document text outside account cloud history are temporary by default and deleted after processing or expiration; generated outputs are retained until deleted or account retention rules apply.
  • Account, billing, and hosted usage metadata — retained as needed for account operation, billing, legal compliance, abuse prevention, reliability, and support.
  • Cookie consent — preferences stored for 6 months.

Security

We take reasonable measures to protect the Service:

  • BYOK provider keys are stored in browser extension local storage, isolated from web pages.
  • Backup or sync features, if offered later, must be explicitly enabled.
  • The Extension uses a strict Content Security Policy.
  • Output is sanitized with DOMPurify to prevent injection attacks.
  • No external scripts or tracking pixels are loaded by the Extension.

However, no method of electronic storage is 100% secure. We cannot guarantee absolute security.

Children's Privacy

Our Service is not directed to anyone under the age of 16. We do not knowingly collect Personal Data from children. If you are a parent or guardian and believe your child has provided us with data, please contact us.

Links to Other Websites

Our Service may contain links to third-party websites. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this page periodically.

Contact Us

If you have questions about this Privacy Policy, contact us at:

  • Email: support@reduz.app
  • Mail: Three Things Media, Härtingerstr. 29, 85051 Ingolstadt, Deutschland