What Tastify keeps, and why.

Your account. When you sign in with Google or an email link, we get your email address and, from Google, your name and profile picture. Signing in sets cookies that keep you signed in; we use no other cookies.

What you capture. Only when you press the hotkey, use the right-click menu or upload something, we save:

• the picture or short recording of the part of the page you chose;
• that page's address and title;
• design details the extension reads from that part of the page: fonts, colours, layout, motion, and some of its visible text, such as headings and button labels;
• your answers to the questions, your boards and their names, brand files you upload, and anything you type about your project when you export.

Usage counts. How many captures you've made and how many AI requests you've used today, to apply the free plan and daily limits, and when each connected extension or agent token was last used.

The Chrome extension runs on the pages you visit so the hotkey works anywhere, but it doesn't read or send anything until you start a capture. It doesn't collect your browsing history. Its sign-in token stays in Chrome on that device; you can sign it out from the extension or from your Account page.

• to show you your boards and captures;
• to write the questions about each capture and the briefs you export, using Anthropic's Claude;
• to sign you in, apply plan limits and keep the service safe from abuse;
• to answer you when you email us.

We don't sell your data, show ads, or use analytics or tracking tools.

A few providers run parts of Tastify for us and only process your data to do that:

• Supabase: the database, picture storage, sign-in and sign-in emails.
• Vercel: hosts the website and the server code.
• Anthropic: Claude reads your captures, page details and answers to write questions and briefs. Under Anthropic's commercial terms, this isn't used to train its models.
• Google: only if you choose to sign in with Google.

They may process data in the United States and other countries.

Your boards are private: nobody else can see them, and they never appear on Tastify's public pages. They leave Tastify only when you send them on yourself: a brief you copy or download, a download link (it stops working after 30 minutes), or an agent you connect with a token you created. Pictures in a copied brief are reached through signed links that expire after 7 days. We may also disclose data if the law requires it.

We keep your boards until you delete them or your account. Deleting a capture or a board removes it from Tastify; some of its picture files can stay in our storage until your account is deleted. To have your account and everything in it deleted, email marklee@berkeley.edu from the address you sign in with. We'll do it within 30 days and tell you when it's done.

You can also ask us for a copy of your data, or to correct it, the same way.

Pictures are kept in private storage and shown through short-lived signed links. Extension and agent tokens are stored only as one-way hashes, and you can revoke them at any time. No system is perfectly secure, but we'll tell you promptly if something happens to your data.

Tastify isn't meant for children under 13, and we don't knowingly collect their data. If you think a child has signed up, email us and we'll delete the account.

If we change this policy, we'll update the date at the top, and tell you by email or in the app if the change matters. Questions go to marklee@berkeley.edu. For screenshots of other sites shown on Tastify, see Content & removals.