AEO Quick Check — Extension Privacy Policy

Summary

The AEO Quick CheckChrome extension lets you see how AI search engines (ChatGPT, Claude, Gemini, Perplexity) rank any brand on a page you're viewing. It runs entirely on a single click of its toolbar icon. It does not run in the background, does not read pages you aren't actively requesting a check on, and does not include any analytics, tracking, or telemetry.

This page covers the extension specifically. The broader fixaeo.com website privacy policy at fixaeo.com/privacy/ describes how our backend handles the request that the extension makes — read it alongside this page.

What the extension reads

When you click the extension's toolbar icon, Chrome grants the extension the activeTab permission — and only at that moment. The extension reads exactly one piece of information: the URL of your current tab. From that URL it extracts the root domain (e.g. blog.uber.com becomes uber.com). Path, query string, fragment, cookies, page content, and form data are never read.

The extension does not request the broad host_permissions that some extensions ask for. You will not see an “allow on all sites” install prompt — because we don't need it.

What the extension sends to our servers

A single HTTPS GET request goes to https://api.fixaeo.com/extension/lookup?domain=<root-domain>. The only payload is the root domain (e.g. uber.com). No headers identify you, no cookies are sent, no authentication token is attached.

Our backend logs the requesting IP address (as Cloudflare does for any HTTPS request) and hashes it with a server-side secret for the sole purpose of rate-limiting abuse (60 requests per hour per IP). The hashed IP is held in memory and discarded on container restart. The raw IP is not persisted.

What the extension stores on your device

Using Chrome's storage.local API, the extension keeps a list of the last 5 domains you've checked — domain name, score, and timestamp — so the “Recent checks” panel works across sessions. This data:

• Lives only on your device, in your local Chrome profile.
• Is never sent to our servers or to any third party.
• Is not synced to your Google account (we use storage.local, not storage.sync).
• Is cleared instantly when you click the “Clear” button in the history panel, or when you uninstall the extension.

What the extension does NOT do

• No analytics SDK is bundled into the popup. We do not know which buttons you click inside it.
• No advertising trackers, no cross-site tracking, no third-party scripts.
• No collection of personally identifiable information — name, email, phone, address, payment, location, health, financial, or authentication data. None of these are read, requested, transmitted, or stored.
• No reading of pages in background tabs. No content scripts injected into any site.
• No selling or sharing of any data with anyone. We have no business model where extension data could be sold.
• No remote code execution: the popup's JavaScript is fully contained in the extension bundle reviewed by Chrome Web Store. We do not load remote scripts at runtime.

Chrome Web Store data disclosures

Per Chrome Web Store policy, here is the explicit disclosure of data the extension handles:

• Website content:Yes, limited to the root domain of your active tab when you click the extension icon. Used only to look up the brand's AI visibility score. Not sold, not shared with third parties, not used for marketing or creditworthiness.
• User activity: No.
• PII, authentication, financial, location, health, personal communications, web history: No, none of these.

Children's privacy

The extension is intended for SEO, marketing, and product professionals. It is not directed at children under 13. We do not knowingly collect any data from children under 13.

Changes to this policy

If we change how the extension handles data, we will update this page and bump the “Last updated” date at the top. Material changes will also be reflected in the Chrome Web Store listing.

Contact

Questions or data deletion requests: hello@fixaeo.com.