Who we are
Kiln (“Kiln”, “we”, “us”) is a Chrome extension made by the team at AWeber. It lets you edit text, mark up images and leave notes on a live web page, then copy an exact list of those changes to hand to a developer or an AI coding tool. This policy covers the Kiln extension and the website at kilnfired.app.
What Kiln accesses
To let you edit a page, Kiln needs to read the page you open it on. When you click the Kiln icon or use a Kiln shortcut, the extension reads that tab's website content: its text, headings, images, links and page structure. It uses this to make the page editable, map your edits back to the right spot, run copy lint, and build your change list.
- Kiln only works with a page after you open it there. It doesn't read pages in the background.
- Edits change what you see in your own tab only. Kiln never changes the live website, and visitors never see your edits.
- Pages behind a login work because Kiln runs in your own tab with your existing session. Kiln never reads, stores or transmits your passwords, cookies or login details.
- Kiln doesn't collect your name, email address, location, browsing history, or any personal or financial information through the extension.
What Kiln stores, and where
Everything Kiln saves is kept on your computer, in Chrome's local extension storage. None of it is sent to us.
| What | Why |
|---|---|
| Your change list and notes | So your edits, notes and image markup survive a reload until you copy or clear them. |
| Edited images | Images you crop or mark up in the built-in editor, kept so they can go with your brief. |
| Your evals | Word lists, regex rules, LLM rubrics, and the sites each one is scoped to. |
| Settings | Preferences such as theme, shortcuts and which checks are switched on. |
| Your AI provider key (optional) | Only if you add one, so AI checks can call the provider you chose. See below. |
When you use Copy, Kiln writes your change list to your clipboard so you can paste it wherever you like. What happens after you paste it is between you and the tool you paste it into.
AI checks and your API key
AI checks (LLM evals) are optional. Everything else in Kiln works without them. Deterministic evals, such as copy lint, word lists and regex rules, run entirely in your browser and never leave it.
If you choose to use AI checks:
- You supply your own key for Anthropic, or point Kiln at a model running on your own machine.
- Your key is stored locally in Chrome's extension storage and is sent only to the provider it belongs to. We never see it.
- Only when you run an AI check, Kiln sends the relevant page text and your rubric directly from your browser to the provider you chose. It doesn't pass through our servers.
- If you use a local model, that request stays on your computer.
Requests sent to Anthropic are handled under Anthropic's privacy policy and the terms of your own Anthropic account.
Permissions Kiln asks for
Chrome shows you the permissions Kiln needs when you install it. Each one supports Kiln's single purpose: editing and annotating the page you're on.
| Permission | What it's used for |
|---|---|
| Access to the pages you open Kiln on | Reading and temporarily editing the page in your tab so you can change text, mark up images and run checks. |
| Side panel | Showing your change list, notes and checks next to the page. |
| Storage | Saving your changes, evals, settings and optional API key on your computer. |
| Context menus | Letting you right-click text or an image to leave a note or request a change. |
| Clipboard (write) | Copying your change list when you click Copy. |
| Network access to your AI provider | Only for optional AI checks, sent to Anthropic or your local model. |
For HTML files on your computer, you can turn on “Allow access to file URLs” on Kiln's details page in Chrome. This is off unless you switch it on.
This website
kilnfired.app is separate from the extension. If you join the waitlist, we collect the email address you enter and the page that referred you. This is handled by AWeber, our email provider, and used only to send you news about Kiln. You can unsubscribe from any email with one click. See AWeber's privacy policy for how that information is processed.
The demo video on our homepage is embedded through YouTube's privacy-enhanced mode (youtube-nocookie.com), which doesn't set tracking cookies until you play it.
Retention and deletion
Because Kiln's data lives on your computer, you control it:
- Clear your change list at any time from the Kiln panel.
- Remove your API key or delete evals from Kiln's settings.
- Uninstall Kiln to delete everything it has stored in Chrome.
Data sent to your AI provider is kept according to that provider's own policy. Waitlist emails are kept until you unsubscribe or ask us to delete them.
Security
Kiln keeps your data in Chrome's protected extension storage and sends AI check requests only over encrypted HTTPS connections (or to a model on your own machine). Anyone with access to your Chrome profile can see what's stored there, so keep your computer and profile secure, and treat your API key like a password.
Children
Kiln is a professional tool and isn't directed at children under 13. We don't knowingly collect information from children.
Chrome Web Store User Data Policy
Kiln's use of information complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. Specifically:
- We use website content only to provide Kiln's editing, annotation and checking features.
- We don't transfer user data to third parties, except to the AI provider you choose when you run an AI check.
- We don't use or transfer user data for advertising, credit-worthiness or lending purposes.
- No humans read your data, because it never reaches us.
Changes to this policy
If we change how Kiln handles data, we'll update this page and the date at the top. If a change is significant, such as collecting a new kind of data, we'll explain it in the extension's release notes before it takes effect.