1. Overview
   Lội Thớt Hộ ("the Extension") is a browser extension that reads forum thread content on user-added XenForo forums (such as voz.vn or otofun.net), analyzes it using a large language model (LLM) API key supplied by the user, and displays the results in a local side panel. All processing happens on the user's device or is sent directly from the user's browser to the LLM provider of their choice. The developer does not operate any server, does not receive any user data, and has no access to any information processed by the Extension.
2. Data Collected and How It Is Used
   2.1 Forum content
   When the user opens the Extension's side panel on a supported forum thread, the Extension reads the following data directly from the page DOM:

Post text content
Post author usernames
Post timestamps and post numbers
User profile metadata visible on the page (join date, post count, reaction score, user title/rank)
Thread title and URL
How it is used: This data is assembled into a prompt and sent from the user's browser to the LLM provider configured by the user (see Section 3) to generate a summary and opinion analysis. It is also cached locally in the browser's IndexedDB so the user can revisit past analyses without re-processing.

2.2 LLM API key and provider settings
The user's LLM API key, chosen provider, and related configuration (model name, base URL) are stored locally in chrome.storage on the user's device.

How it is used: The API key is included in requests sent directly from the browser to the user's chosen LLM provider. It is never transmitted to any server operated by the developer.

2.3 Saved analyses and notebooks
Summaries, opinion groupings, and notebook entries created by the Extension are stored locally in the browser's IndexedDB.

How it is used: Persisted solely for the user's own reference within the Extension. No data is synced or uploaded anywhere.

1. Data Sharing
   The Extension does not share user data with the developer or any third party operated by the developer.

Forum post content is transmitted directly from the user's browser to the LLM provider selected by the user. The following providers are supported:

Provider Privacy policy
OpenAI (api.openai.com) https://openai.com/policies/privacy-policy
Anthropic Claude (api.anthropic.com) https://www.anthropic.com/privacy
Google Gemini (generativelanguage.googleapis.com) https://policies.google.com/privacy
OpenRouter (openrouter.ai) https://openrouter.ai/privacy
Custom / self-hosted endpoint (user-defined) Governed by the endpoint operator's own policy
The user is responsible for reviewing the privacy policy of their chosen provider. The Extension only contacts the provider endpoint that the user explicitly configures.

Permission model: The Extension's manifest does not declare any static host_permissions for LLM providers. The first time a user saves their configuration or tests a connection for a given provider, Chrome displays a permission dialog requesting access to that provider's domain (e.g., api.openai.com). This permission is remembered and reused on subsequent requests — the dialog only appears once per provider per browser session.

No other third-party services receive any data from the Extension.

Full details of the privacy could be found here:
https://github.com/duytung1009/ai-diem-bao/blob/main/PRIVACY.md