This document provides general information and is not legal advice.
Publisher brand: The Website.Pro
Legal publisher (individual developer): Alex Hernandez
Location: Florida, United States
Support and privacy contact: support@thewebsite.pro
Effective date: 2026-10-31
ChatGPT Conversations Deleter is independently developed by The Website.Pro and is not affiliated with or endorsed by OpenAI.
This independent, unofficial extension lets you select conversations in the ChatGPT sidebar and delete them using ChatGPT's existing webpage controls. It is not affiliated with OpenAI. It reads relevant sidebar titles, conversation identifiers/links, and interface text locally to perform your selected actions. It checks the active tab URL to identify ChatGPT. Local handling is still data use, even though this information is not uploaded to our service.
The extension does not intentionally retrieve conversation message bodies, collect your ChatGPT password or session cookies, or send ChatGPT titles, conversation IDs, links, or message contents to our access/billing backend, Resend, or Stripe. ChatGPT processes the deletion through your existing authenticated webpage. We do not monitor general browsing history or use the history API.
When you open the popup, the extension creates or reuses a random installation token in Chrome's local storage and sends it with HTTPS access-service requests. After verification, the backend associates a one-way hash of this token with your account. This is an extension installation credential, not a ChatGPT credential.
Chrome session storage temporarily remembers your chosen plan and the email/code-entry step so you can return after reading your verification email. The code itself is not saved there. Successful verification clears the pending email draft. These session-only UI drafts are separate from the server-side account records described below.
When you request verification, your email address and a six-digit code are sent to Resend for email delivery. Codes expire after 10 minutes. Requests are limited, with a 60-second resend cooldown and a maximum of five unsuccessful code attempts per issued code. The backend stores a derived email identifier and code hash, expiry, attempt count, and send time; successful verification removes the one-time code record. The verified email address is stored with an HMAC-derived account identifier so the service can recognize your account after reinstallation.
Each verified email account receives five free successful conversation deletions total, not five per installation, month, or cancellation. Reinstalling, changing devices, or canceling a subscription does not reset that account's used allowance. Verifying a previously used email restores that email account's existing allowance and any active subscription access.
We store the free-deletion count and temporary deletion-permit records, including their state and timestamps, to reserve usage, confirm completed actions, release unused reservations, prevent double spending, and troubleshoot failures. These records do not contain conversation titles, ChatGPT conversation IDs, or message contents. A reservation may temporarily affect the displayed allowance while an action is pending or being reconciled.
The optional paid offer is unlimited deletions while a $1 USD/month subscription remains active. Live Stripe Checkout charges real money when you authorize payment and renews monthly until canceled. Separate sandbox transactions do not charge real money; use only Stripe test payment details in a sandbox.
Stripe-hosted Checkout and the billing portal handle payment entry and subscription management. The backend uses the verified email, account association, Stripe customer/subscription identifiers, subscription status, paid-period boundary, and related checkout/webhook records to manage access. Test and live billing records are kept separately. Signed Stripe events update subscription access. The extension/backend does not store full payment-card numbers. Canceling a subscription at period end leaves access active until that paid period ends; it then returns to the account's remaining free allowance.
Replit hosts the service and PostgreSQL records; Resend delivers verification emails; Stripe provides hosted billing and subscription events. These providers process the information needed for those services under their own applicable policies: Replit, Resend, and Stripe.
The service and hosting providers may process IP addresses, request times, rate-limit information, and operational errors to operate the service and prevent abuse. No geolocation permission is requested. The application does not include an advertising or analytics SDK. Webhook diagnostics use limited outcome/status and verified-event identifiers, not raw payment payloads or signature headers.
We use data only for the extension's stated functionality, verification, allowance/subscription management, security, support, and applicable legal requirements. We do not sell user data, use it for unrelated advertising, or use it for creditworthiness or lending. Necessary service-provider processing is not a promise that no information leaves the device. Our use and transfer of information received through this extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.
Account identity and lifetime-usage records are retained without an automatic expiry to recognize returning accounts and enforce the lifetime allowance. Device associations and subscription records likewise have no automatic deletion schedule. This describes the current implementation, not a waiver of applicable deletion or data-minimization rights.
Verification codes become unusable after 10 minutes; successful verification or a failed email send removes the matching code record. Checkout links expire after 30 minutes; a processed checkout-completion event removes the account's pending checkout record. Expiry alone does not erase either record. Deletion permits retain their state and timestamps; stale reservations are reconciled when the account next requests a deletion. Webhook identifiers are retained to prevent duplicate processing.
Automated cleanup makes unused verification-code records eligible for removal 24 hours after expiry; pending checkout records 2 days after expiry; completed or released deletion permits 90 days after creation; and processed Stripe event identifiers 90 days after receipt. Cleanup is triggered by successful backend API activity, with at most one attempt per hour per running server instance. It runs in bounded batches and skips locked records, so deletion can take longer during inactivity, a backlog or a service failure. These are eligibility thresholds, not guaranteed erasure deadlines. Cleanup does not automatically delete accounts, lifetime-usage totals, device associations, subscription records or unresolved deletion reservations.
Necessary operational logs support security and fault diagnosis. Hosting, email and payment providers may retain their own logs, billing records and backups under their policies and applicable legal obligations. We have not established a separate fixed retention schedule for those records or backups; deletion from the active application database is not a promise of immediate erasure from provider backups.
Requests use HTTPS. Installation tokens and verification codes are stored server-side as hashes; the verified email itself is stored, not merely its derived identifier. No claim is made that hashing makes the account anonymous.
To request access, correction or deletion of your information, contact support@thewebsite.pro from your verified email where possible. The publisher handles requests manually within applicable legal deadlines and may request proportionate identity verification before disclosing or deleting records. There is no automatic account-deletion interface or automated fulfillment workflow. Applicable law may require some records to be retained; any refusal or limitation must have a lawful basis. This policy does not promise that deleting an account resets the lifetime free allowance. Uninstalling stops extension use but does not delete server-side records or cancel a subscription.
You control conversation selection and deletion. Disable the controls or uninstall the extension to stop its local operations. Manage an existing subscription through the popup's Manage billing action. We will post policy updates here with an updated effective date. Applicable privacy and consumer rights are not waived by this policy.