Cairn
Privacy
The short version
Cairn does not collect, transmit, store, or sell any data. The extension processes your Claude conversation entirely within your own browser and writes the resulting file directly to your local disk. There is no Cairn server, no third-party analytics, no telemetry, and no developer-side database.
What the extension does, exactly
When you click the toolbar icon while on a claude.ai/chat/<id> or claude.ai/share/<id> page, Cairn:
- Runs an authenticated
fetch()from inside the page, against Claude's own JSON API endpoint — the same call the Claude web app already makes. - Receives the conversation JSON in your browser's memory.
- Optionally redacts credential patterns (toggled by you).
- Formats the data as JSON, Markdown, or a zip of artefact files.
- Saves the file via the Chrome Downloads API to a location you control.
That is the entire data flow. Claude → your browser → your hard drive. No other party is involved.
What categories of data the extension handles
To generate your export file, the extension reads the following two categories of data from the active Claude tab. These categories are also declared on the Chrome Web Store listing's Data Usage page.
- Personal communications — the messages you have exchanged with Claude in the active conversation. Handled in browser memory only. Written to the export file you save. Never transmitted to Blacktrace or any third party.
- Website content — the text, code blocks, thinking blocks, tool calls, and artefacts rendered on the Claude conversation page. Handled in browser memory only. Written to the export file you save. Never transmitted to Blacktrace or any third party.
What we do not do
- We do not collect personally identifiable information beyond what may be incidentally present in the conversation text you choose to export.
- We do not collect health, financial, or authentication information.
- We do not collect web browsing history, location, or user activity.
- We do not sell or transfer user data to third parties.
- We do not use or transfer user data for purposes unrelated to the extension's single purpose (exporting Claude conversations).
- We do not use or transfer user data to determine creditworthiness or for lending purposes.
- We do not transmit your conversation, or any other data, to any server operated by Blacktrace or any third party.
- We do not use analytics (no Google Analytics, no Mixpanel, no Sentry, no error reporting).
- We do not set cookies.
- We do not include any third-party libraries that make network requests on our behalf.
Permissions, and why each one exists
- activeTab + scripting — to execute the fetch in the page's credential context, which is the only way to read your authenticated Claude session.
- downloads — to save the resulting file to your local Downloads folder.
- sidePanel — to render the export UI alongside your conversation.
- host_permissions:
https://claude.ai/*— limits everything above to Claude pages.
There are no other permissions in the manifest. There is no activeTab usage outside of the explicit user click that opens the side panel.
The optional redaction toggle
If you enable the redaction toggle, Cairn applies regular expressions to the conversation text before writing the file, replacing high-confidence credential patterns (API keys, JWTs, bearer tokens, PEM private key blocks) with [REDACTED_<TYPE>] placeholders. This processing happens locally in the extension. The redaction patterns themselves are bundled in the extension and do not require any network request.
Children
Cairn is not directed at children under 13 and does not knowingly collect data from anyone, of any age, regardless.
Changes to this policy
If material changes are ever made (for example, if a future opt-in cloud-sync feature is added), this page will be updated and the effective date above will change. Such changes will be additive and opt-in only; the core extension will always retain the local-only mode described above.
Contact
Questions about this policy or about Cairn's handling of your data: trace@blacktrace.co.