Privacy policy for AI API Key Manager

Last updated: July 20, 2026

AI API Key Manager does not collect analytics, browsing history, telemetry, advertising identifiers, or personal information for its developer.


API keys and their cached OpenRouter account metadata are stored only in the user's browser. Saved vault contents are encrypted with AES-256-GCM using a key derived from the user's vault password. The vault password is not stored.

If the user chooses to keep the vault unlocked until the browser closes, the derived unlock key is kept in Firefox's extension session storage and is cleared when the browser session ends.


To validate or refresh a key, the extension sends that API key directly to OpenRouter over HTTPS at https://openrouter.ai/api/v1/key. This occurs when a user adds or checks a key, requests a refresh, or unlocks a vault whose cached key information is stale. The extension developer does not receive this data, and there is no intermediary server.

OpenRouter processes data under its own privacy policy and terms.


The extension contains no analytics, advertising, tracking, remote code, or third-party runtime dependencies. The developer does not receive or sell user data.


Users can remove individual keys or reset the local vault from the extension. Reset the vault before uninstalling if explicit deletion of its browser-managed storage is desired.