English
Grok Bot Clipper Privacy Policy — version 0.4.0
Grok Bot Clipper is an independent, unofficial browser extension developed by 铁柱AGI. It is not an official xAI or Cursor product. You need your own working Grok Bot account.
Information handled and why
The extension handles authorization tokens, account identifiers, available profile/team information and BOT metadata to connect your account and select recipients.
It handles the website content and files used in capture workflows, including text, URLs, titles, author information, screenshots, images, tables, available social metrics/media and page archives. It also handles your instructions, drafts, delivery records and BOT conversations to organize material, send tasks and display replies.
On supported X, Xiaohongshu and Douyin pages, scripts automatically inspect relevant page network responses and available page/player state. Extracted post records are cached locally in page memory before you click Send. Sharing integrations also observe page changes and relevant interactions. WeChat article integration reads page content and sharing context.
Chrome MHTML archives are raw page snapshots and may include signed-in or hidden content. MHTML archiving is enabled by default. You can disable it in settings or remove the archive attachment from a draft. Sanitized text extraction and image redaction do not sanitize a separate MHTML attachment.
Local storage and transfers
Settings, account/BOT metadata, materials, drafts, delivery jobs and replies are stored in the current browser’s extension storage or IndexedDB. Authorization credentials use session storage by default. Enabling persistent login also saves credentials in local extension storage. These stores do not automatically sync between browsers.
Authentication and account operations contact the account service. Sending uploads message text, source information and attachments through api2.cursor.sh and service-provided attachment storage or cursorvm.com gateways. Source-media retrieval contacts the relevant websites/CDNs and may occur before delivery. External avatar images may be requested from their supplied URLs. Contacted services receive network information such as your IP address.
The cloud service accessed through your own account operates independently of the extension publisher and applies its own terms and privacy practices. Its retention, deletion, logging and downstream processing cannot be determined from the extension source.
The reviewed version contains no identified analytics integration or project-operated relay. This does not mean that no user data is processed or transmitted.
Sending controls
You can edit drafts, inspect the send preview and remove attachments. With the pre-send instruction option disabled, choosing a BOT can queue delivery directly. Queued work may continue in the background. An accepted delivery indicates server acknowledgment, not completion of the BOT’s task.
Retention and deletion
The default local cleanup setting is seven days. Periodic cleanup applies to eligible materials, replies and terminal delivery jobs; it is not a guarantee that all records disappear after seven days. Drafts, metadata, settings and some job states are outside that cleanup routine.
Logging out removes stored login credentials and account/roster information through the logout flow. It does not erase all locally stored materials, drafts or conversation records. Removing an item from a basket is not a guarantee of permanent deletion of every related record.
Browser extension-data removal or uninstalling the extension can remove local extension data. Separately downloaded files remain subject to your file management. Local deletion does not delete material already uploaded to the account service; consult that service for its controls and policies. No server-side deletion guarantee is made here.
Security
Chrome storage access is restricted to trusted extension contexts. Account API and configured upload connections use HTTPS. The extension does not implement encryption at rest or end-to-end encryption for these materials. HTTP source pages are also supported. Avoid capturing or sending material you are not authorized to share.
Limited Use
Grok Bot Clipper’s use of data received through Chrome complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. Data is used to provide the extension’s stated features, not sold or used for advertising, lending decisions or unrelated profiling. Human access is limited to user-consented support, security investigations, legal requirements or appropriately aggregated/anonymized internal operations. The independently operated account service applies its own privacy practices; this policy does not certify its retention or downstream processing.
Contact
Public support: https://github.com/RongleCat/grok-bot-clipper/issues
Author: https://x.com/cgnot996
Learning resources: https://bot.tiezhu.si/
Do not post credentials, private captures or other sensitive information in public support channels.
简体中文
Grok Bot Clipper 隐私政策——0.4.0 版
Grok Bot Clipper 由铁柱AGI 独立开发,是非官方浏览器扩展,并非 xAI 或 Cursor 官方产品。使用本扩展需要你自己的、可正常工作的 Grok Bot 账号。
处理的信息及用途
扩展处理授权令牌、账号标识、可获得的个人资料和团队信息,以及 BOT 信息,用于连接账号和选择接收对象。
采集流程会处理网页内容及文件,包括文字、网址、标题、作者信息、截图、图片、表格、可获得的社交互动数据及媒体、网页归档。扩展还会处理你输入的指令、草稿、发送记录和 BOT 对话,用于整理资料、发送任务和展示回复。
在支持的 X、小红书和抖音页面中,脚本会自动检查相关页面网络响应,以及可获得的页面或播放器状态。提取的帖子记录会在点击发送前缓存在本地页面内存中。分享集成还会观察页面变化和相关交互。微信公众号文章集成会读取页面内容及分享上下文。
Chrome 的 MHTML 归档是原始页面快照,可能包含登录后或隐藏的内容。MHTML 归档默认开启,可在设置中关闭,也可从草稿中移除归档附件。正文清理和图片遮盖不会清理独立的 MHTML 附件。
本地存储与数据传输
设置、账号及 BOT 信息、材料、草稿、发送任务和回复保存在当前浏览器的扩展存储或 IndexedDB 中。授权凭据默认保存在会话存储中;开启保持登录后,也会保存在扩展本地存储中。这些数据不会自动跨浏览器同步。
认证和账号操作会访问账号服务。发送会通过 api2.cursor.sh、服务提供的附件存储或 cursorvm.com 网关上传消息正文、来源信息和附件。获取源媒体时会访问相应网站或 CDN,可能发生在正式投递之前。外部头像图片可能从所提供的网址加载。接收请求的服务会获得 IP 地址等网络信息。
通过你自己的账号访问的云端服务独立于扩展发布者运营,并适用其自身条款及隐私规则。扩展源码无法确定该服务的数据保留、删除、日志和后续处理方式。
本次审查的版本未发现分析统计集成或项目运营的中转服务。这不表示扩展不处理或不传输用户数据。
发送控制
你可以编辑草稿、检查发送预览并移除附件。关闭发送前补充说明选项时,选择 BOT 可直接加入发送队列。已排队任务可能在后台继续执行。发送被接受表示服务器已确认接收,不表示 BOT 已完成任务。
保留与删除
本地清理默认设置为七天。定期清理仅适用于符合条件的材料、回复及已结束的发送任务,不保证所有记录在七天后消失。草稿、元数据、设置和部分任务状态不在该清理范围内。
退出登录会通过退出流程移除已保存的登录凭据及账号、BOT 列表等信息,但不会清除所有本地材料、草稿或对话记录。从材料篮移除项目,也不保证永久删除所有关联记录。
通过浏览器清除扩展数据或卸载扩展,可移除本地扩展数据。单独下载的文件需要自行管理。本地删除不会删除已上传至账号服务的资料;请查阅该服务的操作方式和政策。本政策不承诺服务器端删除。
安全措施
Chrome 存储访问被限制为可信扩展上下文。账号 API 和配置的上传连接使用 HTTPS。扩展未为这些资料实现静态加密或端到端加密,同时支持 HTTP 来源页面。请勿采集或发送无权分享的资料。
有限使用
Grok Bot Clipper 对通过 Chrome 获取的数据的使用遵守 Chrome 网上应用店用户数据政策,包括有限使用要求。数据用于提供本扩展声明的功能,不用于出售、广告、贷款判断或无关用户画像。人工访问仅限用户同意的支持、安全调查、法律要求,或适当汇总匿名化的内部操作。独立运营的账号服务适用其自身隐私规则,本政策不对其数据保留及后续处理作出认证。
联系方式
公开反馈:https://github.com/RongleCat/grok-bot-clipper/issues
作者:https://x.com/cgnot996
学习资料:https://bot.tiezhu.si/
请勿在公开反馈渠道发布凭据、私人截图或其他敏感资料。