room-skins-privacy

Room Skins Privacy Policy Review draft for version 0.19.4

Draft status: Revised October 2, 2026 for review. Not published or ready for publication. Business-record access, sharing, and customer-email use still need confirmation. See reviewer notes at the end. Effective date: [Set when approved and published] Contact: chatpanda.ai+roomskins@gmail.com

About this policy

Room Skins is an independent browser extension that changes the appearance of the ChatGPT website. It is not affiliated with or endorsed by OpenAI.

This policy describes the behavior of Room Skins version 0.19.4. Earlier versions may behave differently. Check your installed version in Chrome’s extension settings.

Page access and your conversations

Room Skins runs on https://chatgpt.com/* and needs access to the page to apply its themes. Browser page-access permissions allow an extension to read and change site data. In version 0.19.4, Room Skins uses the page’s structure to locate interface elements and apply styles; it does not scan your conversation text.

The extension does not read, store, or transmit your messages or ChatGPT’s answers. It does not collect your browsing history. Your chats remain subject to ChatGPT’s own data practices.

Local settings and unlock records

Room Skins saves your selected room, background setting, and expiry times for verified paid packs in Chrome’s local extension storage on your device. These records are not sent to us or synchronized through Chrome’s extension sync storage.

A successful license verification sets a seven-day local access window. The expiry time controls access to a paid pack; it is not a promise that the stored expiry record is deleted after seven days.

You can change appearance settings in the popup. Uninstalling Room Skins removes its local extension storage. Removing the extension does not delete records held separately by Gumroad or emails you have sent.

Optional Gumroad license verification

Using the free rooms does not require a Gumroad license-verification request. If you choose to unlock a paid pack, Room Skins requests optional permission to contact api.gumroad.com.

When you submit a key for verification, the extension sends an HTTPS POST request directly to https://api.gumroad.com/v2/licenses/verify containing:

• The license key you entered
• The public product identifier for the pack
• An instruction not to increase the license’s usage count (increment_uses_count=false)

The purpose is to check whether the license can unlock that pack. Conversation text and appearance settings are not included in the request. As the recipient, Gumroad can also receive normal connection information, such as your IP address.

Gumroad’s response may include purchase information. Room Skins processes that response temporarily to check the license and does not save the purchase response in local extension storage. The local unlock record retains the expiry time described above.

Version 0.19.4 does not save newly entered license keys to persistent extension storage. The key is handled temporarily during verification. Successful verification clears the input field. After a failed attempt, the key may remain in the popup’s masked field until you change it or close the popup.

Earlier development builds may have saved license keys locally. Cleanup of those old entries runs when you open the version 0.19.4 popup. Updating the extension or opening ChatGPT alone does not establish that those entries have been removed.

Gumroad handles information it receives under its own privacy policy: https://gumroad.com/privacy

Packaged resources and analytics

Room Skins’ theme artwork and code are packaged with the extension. Its theme functions do not download or execute remote code. The extension does not include analytics or advertising trackers and does not send page content, conversations, or appearance choices to us or third parties.

The optional Gumroad verification request and user-initiated feedback described in this policy are separate from applying a theme.

Feedback

Choosing Send feedback opens a Gmail compose page addressed to chatpanda.ai+roomskins@gmail.com using a fixed feedback link. No email is sent automatically, and the extension does not attach your conversation or license key.

If you choose to send a message, we receive your email address and the information you include. Avoid including passwords, license keys, or conversation details you do not want to share. Gmail’s handling of that message is governed by Google’s privacy policy: https://policies.google.com/privacy

Support and customer record retention

We do not currently have a fixed deletion schedule for support emails or seller-side customer records in our accounts. No particular deletion period is promised by this policy. Gumroad and email service providers apply their own retention practices to records they hold.

Other services

Room Skins does not change how ChatGPT handles your chats. OpenAI’s privacy policy is available at: https://openai.com/policies/privacy-policy/

If you visit or purchase through Gumroad, that activity is governed by Gumroad’s own terms and privacy practices. The extension’s local-storage behavior and seven-day access window do not determine how long Gumroad or an email provider keeps its records.

Limited Use statement for review

Proposed wording only, subject to the owner confirming actual practices before publication: “Room Skins’ use and transfer of user data complies with the Chrome Web Store User Data Policy, including its Limited Use requirements.”

Questions and changes

For privacy questions, contact chatpanda.ai+roomskins@gmail.com.

If Room Skins’ data practices change, we will update this policy and its effective date.

Reviewer notes to resolve before publication

These notes are for review and are not confirmed public policy claims. Remove them only after resolving the items below.

• Owner information: There is no fixed deletion schedule yet. The owner reports no known use of customer emails, but that answer is uncertain. Customer-email use, access to support/customer records, exports, sharing, and any automated email activity remain unconfirmed. Do not turn that answer into a blanket no-marketing or no-sharing promise.
• Limited Use: The sentence above is proposed wording, not a completed compliance assessment. Confirm actual practices before adopting it or making the separate Chrome Web Store dashboard certifications.
• Codex check: Verify the final package after code changes, including page data actually read, Gumroad response fields received, local storage and legacy cleanup, permission scope, unlock disclosure, and absence of remote code. Match the policy version and effective date to that release.
• Store categories: Review Authentication information for the key, Personally identifiable information for purchaser identifiers/email, Financial and payment information for transaction data, and Location for country data in Gumroad’s documented response. Resolve Website content from actual page handling. Do not describe Personal communications as ChatGPT access when the final build does not read chats. These are proposed mappings for final-build verification, not already submitted declarations.

Review sources Chrome privacy fields: https://developer.chrome.com/docs/webstore/cws-dashboard-privacy Chrome user data guidance: https://developer.chrome.com/docs/webstore/program-policies/user-data-faq Chrome Limited Use: https://developer.chrome.com/docs/webstore/program-policies/limited-use Gumroad license response: https://gumroad.com/api#licenses

This review draft is not a legal compliance certification.