Privacy Policy

01Who we are

This policy applies to the Skisso browser extension and the website at skisso.app (together, “Skisso”, “we”, “us”). The data controller is Zakabluk A., trading as WebbRiddare, a sole proprietorship registered in Sweden. For any privacy question or request, contact hello@skisso.app.

02What Skisso does (single purpose)

Skisso lets you select an element on the page you are viewing, edit its appearance live, and copy the resulting change — as CSS, as a described patch, or as an annotated screenshot — to your clipboard, so you can hand it to the AI coding assistant or colleague of your choice. With the optional local bridge you can also hand it over directly: to your own coding agent in the panel's AI agent chat, or to your team as a GitHub issue. That single purpose defines the only data Skisso ever touches.

03What stays on your device

• Content you select. When you trigger a selection, Skisso reads the markup and computed styles of that element, at that moment, so it can be edited and described. It is never captured in the background and never sent to us.
• Screenshots you take. A screenshot is produced only when you ask for one, held in the browser to be drawn on, and placed on your clipboard or saved by you. It is not uploaded anywhere.
• Your pending edits. So a page reload does not lose your work, unfinished changes are kept in the browser’s session storage for that page and cleared when you reset them or close the tab.
• Extension settings. Any preferences you set are stored locally in your browser.

04What leaves your browser

Nothing, by default. Skisso has no server and makes no calls to any AI provider itself — the change you build is placed on your clipboard, and you choose where to paste it. These are the things worth naming precisely:

• The optional local bridge. If you run the Skisso bridge on your own machine, the extension talks to http://127.0.0.1:3177 to learn which project you have open. That traffic never leaves your computer.
• A coding tool you connect over MCP. The bridge can also act as a local MCP server. If you connect a coding tool to it yourself, that tool can ask the open Skisso panel for the selected element and its styles, your pending changes, the page’s design tokens, or a screenshot of the visible tab, and it can preview CSS values, which you can undo. This only works while the panel is open, and the exchange between the extension and the bridge stays on your computer. What the tool then does with that information, for example sending it to an AI provider, is governed by that tool’s own terms.
• The AI agent chat. If you chat with a coding agent in the panel, your messages, the elements you selected, your pending edits and any files or screenshots you attach go through the local bridge to the coding agent installed on your computer (for example Claude Code or Codex). That agent runs under your own account and may send the conversation to its AI provider; its own terms apply. The agent changes files in your project only when you allow it. Chat history is kept on your computer, in a folder of your user account, and you can delete it from the panel.
• GitHub issues. If you press Create issue, the bridge uses the GitHub CLI on your computer to create the issue in the repository you chose, under the GitHub account you chose. The issue contains what you see in the draft: the page address, the selected elements, the CSS you changed and your words. Nothing goes to GitHub until you press the button. If you choose Open on GitHub instead, GitHub’s own page opens in your browser with the draft filled in.
• Your own design rules. If you add rules from a link, the bridge downloads that file once from the address you gave and keeps a copy on your computer.
• Font previews. If you preview a Google Font, your browser loads that font from Google’s font service exactly as any website would. Skip the Google list and nothing is requested.
• Feedback you choose to send. Send feedback opens a new issue on GitHub (github.com/zkblk/skisso), which is public, with your description, Skisso and browser versions, current tool state, edit count, bridge status and the last capture error. It does not include the page address, page content or source code. Nothing is sent until you press Create on GitHub, under your own GitHub account and GitHub's terms. If you choose Email instead, a draft addressed to hello@skisso.app opens in your email app with the same details plus the page address without query parameters or fragments.

05What we do not do

• We do not sell, rent, or share your data with advertisers or data brokers.
• We do not run analytics, telemetry, or tracking on the pages you visit.
• We do not build a browsing history or monitor pages in the background. Skisso uses only the current page address and content you explicitly select or capture for the feature you requested.
• We do not operate a server that receives, stores, or processes your selections.
• The extension sets no advertising or analytics cookies.

Install and uninstall pages. When you first install Skisso it opens skisso.app/welcome, and when you remove it Chrome opens skisso.app/bye with one optional question. The only thing in those addresses is the Skisso version number; the extension itself still sends nothing.

The website is the one exception. skisso.app uses Google Analytics 4, with Google Tag Manager to manage the site's tags, to understand how visitors find and use the site, but only after you click Accept in the cookie banner. Until then neither script is loaded and no analytics cookie is set. Tag Manager itself sets no cookies; it only runs tags under the same consent. With your consent, Google Analytics collects the pages you view, the referring site, your approximate country and city, device and browser type, and clicks on the Chrome Web Store button, using first-party cookies (_ga, _ga_*) kept for up to 14 months. Google Analytics 4 does not log or store IP addresses. Google Ireland Limited processes this data on our behalf; transfers to the United States rely on the EU-US Data Privacy Framework. The legal basis is your consent, which you can withdraw at any time through Cookie settings at the bottom of every page.

06Legal bases (GDPR)

Because Skisso processes data locally and only on your instruction, the relevant basis under Article 6 GDPR is performance of the service you request (Art. 6(1)(b)) — you trigger a selection, an edit, or a screenshot, and the extension carries it out in your browser. You can stop at any time by resetting your changes or uninstalling the extension.

07International transfers

Skisso makes no automatic transfer to us or to an AI service. If you paste a copied change into an AI assistant, chat with your coding agent in the panel, create a GitHub issue, save a screenshot, preview a Google Font, or send a feedback email, that is your explicit action in the tool you chose and is governed by that service’s terms.

08Data retention

Your settings remain in your browser until you remove them or uninstall the extension; pending edits live only for the session. If you use the local bridge, its chat history, project settings and your own rules are kept on your computer in the .skisso folder of your user account until you delete them (chat history can be deleted from the panel). We retain no extension data. If you choose to email feedback, that email is kept only as needed to respond to or debug the report. Uninstalling Skisso, or clearing it in your browser’s extension settings, deletes all locally stored data.

09Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, port, and object to the processing of your personal data, and to withdraw consent. Because Skisso holds no data on any server, you can exercise all of these directly — your data lives only in your browser and is removed when you clear or uninstall the extension. For any request or question, email hello@skisso.app.

10Security

Your settings are kept in your browser’s extension storage, not on our servers — we operate none. Skisso contains no remotely hosted code: all of its logic is bundled in the extension package, as the Chrome Web Store requires.

11Chrome Web Store — Limited Use

Skisso’s handling of information from your browser adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements. The content you select is used only for the single purpose of showing, describing and handing over the change you asked for. It leaves your device only when you hand it over yourself: by pasting it, through your own coding agent, or as a GitHub issue you create. We do not sell it, use it for advertising or profiling, or transfer it to anyone.

12AI assistants you use

Skisso is agent-neutral and connects to no AI service itself. If you paste a change into Claude, Cursor, Copilot, or anything else, or chat with a coding agent installed on your computer through the panel, the handling of that content from that point on is governed by that tool’s own terms and privacy policy. Review the policy of whichever assistant you use before giving it interface content.

13Children

Skisso is a developer and design tool and is not directed to children under 13.

14Changes to this policy

We may update this policy as the product evolves. Material changes will be reflected here with a new “last updated” date, and, where the change affects how your data is handled, surfaced in the extension before it takes effect.

15Complaints

If you believe your data has been handled improperly, you have the right to lodge a complaint with the Swedish supervisory authority, the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) — imy.se.

16Contact

Questions about privacy? Email hello@skisso.app.