Cheirograph

Effective October 18, 2026

Cheirograph (the "Service") provides an estimate as to whether a given text was written by a person or by artificial intelligence. In order to provide this estimate, text submitted by a User must be transmitted to a detector hosted on the Cheirograph server. This Privacy Policy applies to the Service as made available through the browser extension and through the website located at cheirograph.vercel.app.

Information Transmitted and Its Destination

The extension transmits text which is visible on the page being viewed by the User, in passages of approximately 20 to 400 words. Text which is not displayed on screen is not transmitted. No text is transmitted from any site appearing on the never-check list, and, unless the default is altered, no text is transmitted from any page containing a password field.

The website transmits the text which the User has pasted into the box at the time the Check button is pressed.

Text is transmitted to the developer's own computer, which operates as the Cheirograph server, by means of an HTTPS connection routed through Tailscale Funnel. Requests originating from the website are additionally routed through Vercel, which hosts the website and does not retain the text.

The text is not sold to or shared with any party, is not used for advertising, and is not used to train models.

Storage, Logs and Controls

Text submitted for checking is not stored by the Cheirograph server. It is held in memory while being scored and is then discarded. In order to ascertain when something has gone wrong, the server records the time, type and status code of each request which is received, though not the text which was checked. This log is deleted whenever the server is restarted. For the prevention of abuse, the server counts the requests which it receives from each IP address in any one minute, the counts being kept in memory only and not at any time written to disk.

Up to 5,000 recent results are kept by the extension in the browser, so that the same passage is not sent twice. For each result a one-way hash of the passage is stored, together with the score, but the passage itself is not stored. These results may be cleared by the User on the settings page of the extension. The settings are also stored in the browser, and both the results and the settings are removed when the extension is uninstalled.

Tailscale and Vercel each retain, for a short period, connection logs of their own, which may include information such as times and IP addresses and which are governed by the respective privacy policies of those companies. The text which has been submitted does not appear in any of these logs.

While the extension is in use, it may be turned off at any time by means of the switch located in its toolbar panel. The extension does not read or transmit anything on any site appearing on the never-check list. That list initially comprises patient portals, banks, payment and cryptocurrency services, tax and government ID sites, password managers, and payroll and HR sites. Additional sites may be added by the User by right-clicking the toolbar icon and selecting "Never check this site". On any page containing a password field the extension pauses by default.

As results are estimates, a result may be incorrect in either direction, most frequently in the case of short text. A result should not be relied upon as the sole basis for a decision concerning a person.

The Service is not intended for children under the age of 13, and personal information is not knowingly collected from any child who is under that age.

Changes and Contact

Where this Privacy Policy is amended, the revised version will be posted with a new effective date. Any questions may be directed to alexanderfavvas@gmail.com.