Legal

Privacy Policy

Your data belongs to you. Every product we build starts from that principle.

Last updated October 12, 2026

Our Commitment

Studio-Wide Principles

Kindled Flame Studios builds tools that liberate. That philosophy extends to how we handle your data across every product we make.

Local-first by default. We process data on your device whenever possible. If a product requires server communication, we tell you exactly what, why, and where.

No surveillance business model. We don't sell ads. We don't sell data. We don't profile users. Our revenue comes from products people choose to pay for.

Minimal collection. We collect only what's necessary for a product to function. If we don't need it, we don't ask for it.

Transparent changes. If we update this policy, we'll note the changes here with an updated date. No silent edits.

Website Performance Monitoring

The KFS website uses Cloudflare's cookieless real-user monitoring (RUM) to measure visits and page performance. Measurements include page URLs, referrers, browser/device categories and performance timings, sent to Cloudflare for processing and reporting.

Cloudflare states that this beacon does not read cookies or browser storage, and that its RUM service discards incoming client IP addresses rather than retaining them in its core databases or logs. This describes website monitoring; the product-specific privacy statements below describe our applications.

For details, see Cloudflare's RUM documentation and reporting dimensions.

Product Privacy Details

CinderACE — Browser Extension

Overview

CinderACE is a Chrome browser extension that exports AI chat conversations from supported platforms. Conversation text and formatting are processed in your browser. Export files stay on your device by default; if you choose a cloud destination, the selected export goes directly to your own provider account. We do not receive or store exported conversation files.

What We Access

CinderACE reads conversation content on the following platforms — only when you actively click the export button:

AI Assistants

Claude
ChatGPT
Google Gemini
Grok
DeepSeek
Perplexity
Qwen
Microsoft Copilot
Mistral
Pi

AI Companions

Kindroid
Character.ai
Nomi

On companion platforms, CinderACE may additionally read voice call transcripts, images, and audio/video content when you initiate an export. Some selected media is fetched from the source platform. Exports are saved to your device by default; if you choose cloud export, only the selected files are sent directly to your provider account.

CinderACE does not read, scan, or access any page content in the background. Extraction occurs only in response to your explicit action.

How We Handle Your Data

Local-First Processing. Conversation extraction and formatting happen in your browser. The extension may fetch selected media from its source platform; account and license actions contact the KFS service. Export files stay local unless you explicitly choose cloud export.

Direct Downloads. Exported conversations save as local files through your browser's built-in download system by default.

Optional Cloud Export. You can optionally connect Google Drive, Dropbox, or Notion to export directly to your own cloud storage. These connections are opt-in, configured in Settings, and only activated when you explicitly choose a cloud destination. Your data goes to your own accounts — never to our servers.

Conversation Privacy. The CinderACE extension does not send exported conversation files or extension usage analytics to KFS. When you choose a cloud destination, the selected export is sent directly from your browser to that provider account. Account information used for sign-in and licensing is described below.

No Extension Advertising or Analytics. The CinderACE extension does not use analytics, telemetry, or advertising trackers. Account, session, and install records described above support sign-in, license status, and device association. Website performance monitoring is described above.

Network activity depends on what you do: an export may fetch selected media from its source platform; account and license actions contact the KFS service; checkout and OAuth flows contact their providers; and cloud export sends your selected files to the provider you choose. Conversation parsing and formatting remain in your browser.

Permissions Explained

Permission	Why It's Needed
Active Tab	Read conversation content from the current page when you initiate an export.
Scripting	Inject platform-specific content scripts to extract conversation data, thinking blocks, and media.
Downloads	Save exported conversation files directly to your device.
Storage	Remember your export preferences (format, names, theme) locally in your browser.
Host Permissions	Access the 13 supported AI platforms listed above for user-initiated exports, plus payment/account services and Google Drive, Dropbox, and Notion API domains for sign-in, licensing, checkout, OAuth, and optional cloud export.
Identity	Manage OAuth authentication flows for optional cloud export connections (Google Drive, Dropbox, Notion). Only used when you explicitly connect a cloud service in Settings.
Side Panel	Allow CinderACE to dock as a Chrome side panel for persistent access alongside AI platforms.

KFS Account & Pro Licensing

CinderACE's free tier requires no account. If you choose to upgrade to Pro, you create a Kindled Flame Studios account.

What we collect. Your email address and a securely hashed password. That's it. No name, no phone number, no billing address.

Why we collect it. To authenticate your account, manage your Pro license, and send password reset emails if you request one.

Where it's stored. Account data is stored on Cloudflare Workers KV — Cloudflare's edge infrastructure. Passwords are stored as salted hashes. We never store plaintext passwords.

License recovery. Your Pro license is tied to your KFS account, not your device. Log in on any browser and your Pro features reactivate. No hardware fingerprinting, no device tracking.

Account deletion. You can request full account deletion at any time by contacting us. Deletion removes your account, email, password hash, and license records after billing checks. We retain a minimal non-secret payment identifier when needed to prevent delayed payment notifications from restoring deleted access; it is not used to identify your email or grant access.

Third-Party Services

Stripe handles all payment processing for Pro subscriptions and lifetime purchases. When you upgrade to Pro, you're redirected to a Stripe-hosted checkout page. CinderACE and Kindled Flame Studios never see, process, or store your payment details. Stripe's privacy policy applies to payment data: stripe.com/privacy

Cloudflare Workers powers our account backend for authentication, license validation, and session management. Sign-in and verification requests send your email address and password over HTTPS; the Worker hashes the password before storage. Cloudflare privacy policy

Resend sends transactional password-reset and email-verification messages when requested. Resend receives the address and message content needed to deliver the email; no conversation files are included. Resend privacy policy

Optional Cloud Export Integrations:

Google Drive. When you connect Google Drive in Settings, CinderACE uses the Google Drive API to upload exported files to your own Drive account. Authentication uses OAuth 2.0. Only the files you export are uploaded — no other data is accessed or read from your Drive.

Dropbox. When you connect Dropbox in Settings, CinderACE uses the Dropbox API to upload exported files to your own Dropbox account. Authentication uses OAuth 2.0. Only the files you export are uploaded.

Notion. When you connect Notion in Settings, CinderACE uses the Notion API to export conversation content to a Notion page you select. Authentication uses OAuth 2.0. Only the content you export is sent.

Cloud uploads are opt-in. Without cloud export, files remain local by default. Account and license actions can contact the KFS service, and an export may fetch selected media from its source platform.

The CinderACE extension does not use advertising networks, tracking pixels or usage-analytics platforms. Its account services and optional integrations are described above.

Data Retention

Conversation data: CinderACE retains no conversation data. Exported files go to your device or your own cloud storage and are never stored by us.

Local preferences: Your export settings (format, names, theme, per-platform presets) are stored locally in your browser's extension storage and are removed automatically when you uninstall the extension.

Account data: If you create a KFS account for Pro, your email and hashed password are retained until you request account deletion. License and subscription status is retained for the duration of your subscription.

ember-memory — Desktop Memory App

Overview

ember-memory is an open-source desktop app and memory engine for AI CLI workflows. It is local-first: collections, settings, provider keys, and memory databases are stored on your own machine by default.

Local storage. ember-memory stores its app data in your local user profile, including memory collections, CLI hook settings, and provider configuration.

Optional AI providers. You can use local Ollama models, or you can add your own OpenAI, Google, or OpenRouter keys. When you choose a cloud provider, text sent for embeddings or model listing goes directly to the provider you selected under that provider's terms.

No KFS account required. ember-memory does not require a Kindled Flame Studios account, subscription, telemetry account, or hosted sync service.

No hidden telemetry. Kindled Flame Studios does not receive your memories, imported files, API keys, retrieval logs, or usage analytics from ember-memory.

Your Rights

Free users: No account is required. Uninstalling CinderACE removes all locally stored preferences. Since we collect no personal information from free users, there is nothing to request deletion of.

ember-memory users: ember-memory data lives locally on your machine unless you choose to send content to an external AI provider. Deleting the local app data removes your local memory collections and settings.

Pro users: You can request full account deletion at any time by contacting us on Reddit or Discord. Deletion removes your account, email, password hash, and license records after billing checks. We retain a minimal non-secret payment identifier when needed to prevent delayed payment notifications from restoring deleted access; it is not used to identify your email or grant access. Uninstalling the extension removes all local preferences independently of your account.

If a future product requires additional data collection, your rights regarding that data will be detailed in its specific section above.

Contact

Questions or concerns about this privacy policy or any Kindled Flame Studios product?

Reach us on Reddit or Discord.