SHOTWRIGHT

Shotwright is a structured prompt editor for AI image and video generators. It is built "bring your own key" (BYOK) and local-first. This policy describes everything the extension does with data — which is deliberately little.

What Shotwright stores

All data stays on your device:

Prompts, presets, snippets, history, settings — localStorage of the extension page.
Reference images and the generation queue — IndexedDB of the extension page.
Your API keys (Anthropic, DeepSeek, Replicate) — chrome.storage.local. Keys are entered by you, stored locally, and sent only to the respective provider's official API endpoint when you trigger an action.
Captured site selectors (element picker) — chrome.storage.local; host and CSS selector of the prompt field you explicitly picked.

Shotwright has no backend, no accounts, no telemetry, no analytics, no ads and sets no cookies. Nothing is collected, transmitted to us, or shared with third parties.

Network requests

Shotwright only talks to third-party APIs with your own keys, on your explicit action:

api.anthropic.com — prompt transforms, Smart Edit, image describe (your Anthropic key)
api.deepseek.com — text transforms (your DeepSeek key)
api.replicate.com — image generation previews (your Replicate token)
api.gumroad.com — one-time license verification (licensed builds only; sends the license key you enter, nothing else)

The free key check in the setup wizard calls the providers' list/account endpoints and spends no tokens. Prompt content is sent to a provider only when you invoke an AI action.

Permissions

storage — keep your settings/keys locally
sidePanel — Shotwright's UI lives in Chrome's side panel
activeTab + scripting — insert your finished prompt into the page you are on, only when you click the insert/pick action
Host access to the API domains above — lets the extension call them from the service worker (CORS)
Optional host access (granted per site, on your request) — remembers the prompt field you picked on a site so inserts keep working later

Your data, your control

Uninstalling the extension removes all stored data. Keys can be cleared at any time in Settings. There is nothing to delete on any server, because nothing ever leaves your machine.

Contact

Questions: eliasfoerg@googlemail.com