Privacy Policy

Overview

Regex Generator ("the Service") is a browser extension and website for building, testing, and generating regular expressions. This policy explains what data the Service handles, why, and what it never does. Short version: no cookies, no tracking, no advertising, no selling of data. The sandbox itself runs entirely in your browser.

What is stored in your browser

• Session tokens (access and refresh JWT) inlocalStorage — only if you sign in. Used to authenticate API requests.
• Recent patterns history inlocalStorage (website) orchrome.storage.local (extension) — the last regular expressions you typed, kept on your device only.
• Extension settings (API URL, optional site URL) inchrome.storage.sync.

This storage is functional: it makes sign-in, history, and settings work. It is never used for tracking, and nothing in it is transmitted to third parties.

What is stored on our servers

• Account: email address, scrypt password hash (we never see or store your password in plain text), and — if you use Google sign-in — your Google account ID.
• AI usage counters: how many generation requests you made within the current limit window, to enforce plan limits.
• Subscription status: plan, period, and grace-period state if you upgrade to Pro.
• Payment history: amounts, dates, and status, processed by our payment partner (see below). We do not store full card numbers.

Test strings you type into the sandbox are processed locally in your browser and are not stored on our servers, except when you explicitly pass them as context to AI generation (see below).

AI generation

When you use "Generate with AI", your natural-language description — and, if you tick the option, the current test input — is sent to a third-party large language model provider (OpenRouter, which routes to model providers such as Google) solely to produce a regular expression for you. Do not include secrets, passwords, or personal data of others in prompts or test strings.

Third-party services

• Cloudflare — DNS, CDN, DDoS protection, and TLS termination for regex-generator.app. Cloudflare processes IP addresses and request metadata for security and delivery.
• OpenRouter — AI generation proxy (see above).
• Payment partner (Stripe via monetize.software) — processes Pro subscriptions; acts as merchant of record. Card data goes directly to the payment provider, never through our servers.
• Hosting (Contabo, US) — VPS where the API and database run.

What we do not do

• No cookies and no fingerprinting or cross-site tracking of any kind.
• No advertising and no sale or rental of personal data.
• No collection of the regular expressions or test texts you create in the sandbox.

Your rights

You can request access to, correction of, or deletion of your account data at any time by emailing [email protected]. Deletion removes your account, tokens, usage counters, and payment history references. Residents of the EU/EEA (GDPR) and California (CCPA) have the same rights; we honor them for all users regardless of location.

Data retention and security

Account data is kept while your account is active and removed upon deletion request. AI generation logs keep request metadata (timestamps, token counts, estimated cost) for up to 90 days for abuse prevention and cost control — without the content of your prompts. Traffic is encrypted in transit (TLS), passwords are hashed with scrypt, and refresh tokens are stored hashed.

Children

The Service is a developer tool and is not directed at children under 13 (or under 16 in the EU). We do not knowingly collect personal data from children.

Changes to this policy

If we change this policy, the updated version will be posted on this page with a new "last updated" date. Continued use of the Service after changes means you accept the updated policy.

Contact

Questions about this policy or your data: [email protected].