Privacy Policy — Iconoplasm
Last updated: May 23, 2026
This policy describes what data Iconoplasm collects and how it’s handled.
What the Extension Does
Iconoplasm scans web pages you visit for human gene symbols (like TP53, BRCA1). When it finds them, it highlights the text and shows hover cards with the gene’s assigned character-card data and blot. It also tracks which genes you’ve encountered (your “discovery” count).
Data Collected
Page Content (read locally, never transmitted)
The extension reads the text content of pages you visit to find gene symbol matches. This text never leaves your browser. Gene matching happens entirely on your device using a local trie data structure.
Gene Symbol Lists (sent to our server)
When the extension finds gene symbols on a page, it sends those symbols — and only those symbols — to iconoplasm.brinedew.bio to fetch card data and blots. We do not send the URL you’re visiting, the page content, or any other browsing data.
Discovery Encounters (optional, sent to our server)
If you’re signed in via Discord, the extension reports which gene symbols you’ve encountered so your discovery count syncs across devices. If you’re not signed in, discoveries are stored locally in chrome.storage.local and never leave your browser.
Discord Login (website only)
If you sign in on the Iconoplasm website, we store your Discord user ID, username, and avatar URL so we can keep your account, discoveries, votes, requests, and settings connected to you.
Image Generation and Editing (website only)
If you use direct image generation or image editing, we store the job details needed to run and display the result: gene symbol, selected provider, prompt mode, selected emulsion, source image for edits, job status, and generated image metadata.
If you add an image API key, we store it encrypted and use it only for generation or editing requests you start. Those requests may send the prompt, selected emulsion, source image for edits, and generated result to the image provider you selected.
User Emulsions (website only)
If you save a custom emulsion, we store its text and a public ID based on your Discord username, such as USERNAME-1. Saved emulsions may appear in the website’s emulsion picker and may be attached to generated or published blots.
Preferences (stored locally)
Your settings — highlight mode, tooltip theme, card variant, and blocklist — are stored in chrome.storage.local on your device. They are not transmitted to any server.
What We Don’t Collect
- Browsing history: We never see which URLs you visit.
- Page content: The full text of pages stays on your device.
- Personal information from extension scanning: The extension itself doesn’t collect names, emails, URLs, or page text from the pages it scans.
- Extension analytics or telemetry: The extension has no usage tracking, no crash reports, and no third-party analytics.
Network Requests
The extension makes requests only to iconoplasm.brinedew.bio:
| Request | What’s Sent | When |
|---|---|---|
| Gene batch lookup | List of gene symbols found on the current page | When you visit a page with gene symbols |
| Blot fetch | Gene symbol | When a hover card is shown |
| Discovery encounter | Gene symbol | When a gene is first encountered (signed-in users only) |
| Discovery state sync | Session cookie | On page load (signed-in users only) |
No requests are made to any other domain.
The signed-in website may also contact Discord for login and the image API provider you choose for generation or editing.
The website may load Cloudflare Web Analytics only after you allow analytics in the site prompt. Cloudflare Web Analytics is cookieless and used for aggregate page-visit counts.
Content Script Scope
The extension’s content script runs on all web pages (except iconoplasm.brinedew.bio and staging.brinedew.bio, which are excluded). This broad scope is necessary because gene symbols can appear on any website — research papers, Wikipedia articles, databases, forums, etc. The content script only reads text nodes to find gene symbols; it does not read form inputs, passwords, or other sensitive page elements.
Data Storage
| What | Where | Duration |
|---|---|---|
| Display preferences | chrome.storage.local | Until you change them |
| Blocklist customizations | chrome.storage.local | Until you change them |
| Guest discoveries | chrome.storage.local | Until you sign in (merged to server) or clear extension data |
| Signed-in discoveries | Cloudflare D1 database at iconoplasm.brinedew.bio | Until you request deletion |
| Discord account link | Cloudflare D1 database at iconoplasm.brinedew.bio | Until you request deletion |
| User emulsion | Cloudflare D1 database at iconoplasm.brinedew.bio | Until you change it or request deletion |
| Image provider API keys | Encrypted in Cloudflare D1 database at iconoplasm.brinedew.bio | Until you remove them or request deletion |
| Generation and edit jobs | Cloudflare D1 database and image storage | Until removed by site maintenance or deletion request |
Third Parties
- Cloudflare: Infrastructure provider for
iconoplasm.brinedew.bio. See Cloudflare’s privacy policy. - Cloudflare Web Analytics: Used on the website only after analytics consent, for aggregate traffic measurement.
- Discord: Used for website login.
- Image API providers you choose: Used only when you start direct generation or editing.
- No data is shared with advertisers, analytics providers, or unrelated third parties.
Your Rights
You can:
- Clear all local data by removing the extension or clearing its storage in your browser’s extension settings.
- Remove website settings such as saved image API keys and your user emulsion in Iconoplasm settings.
- Request deletion of server-side account, discovery, generation, or settings data by emailing support@brinedew.bio. We’ll respond within 30 days.
Children’s Privacy
This extension is not directed at children under 13. We don’t knowingly collect data from children under 13.
Changes
We may update this policy. The “Last updated” date at the top will reflect changes.
Contact
Email: support@brinedew.bio
Iconoplasm is a personal project. This policy reflects our commitment to handling your data responsibly and transparently.