Chrome extension · Powered by GPT-6 Astra

Nobody reads the terms.
Someone should, before you sign.

Privacy & Terms Guardian reads the Privacy Policy and Terms of Service behind every sign-up form — live, on the page, in front of you — and tells you in one plain sentence what could actually go wrong. Then, if you'd rather not agree to it, it finds you something better.

notion.so · sign-up · terms of service ¶4 reviewed live

4.1 — You agree that advertising partners may access information about your activity in order to make advertising more relevant to you across the internet.

4.2 — Where you register with a business address, we may supplement your account information with data obtained from third parties for marketing and sales purposes.

Advertising partners can track your activity on Notion to target you with ads across the internet.
Notion may enrich your work-email account with third-party information for targeted marketing.
1.0 — The problem

The average privacy policy takes 29 minutes to read. Nobody has 29 minutes.

So everyone clicks "I agree," and the industry knows it. That's exactly where the real terms live — not in the headline promise ("we don't sell your data"), but in the clause two pages later that quietly allows the exception.

By creating an account, you acknowledge that you have read and understood this Agreement in its entirety, including all exhibits, schedules, and amendments incorporated herein by reference, and you consent to the collection, use, disclosure, retention, and cross-border transfer of your personal information as further described in Sections 3 through 17 and the accompanying Privacy Statement, which may be updated from time to time at our sole discretion…

no one read this
2.0 — How it works

Three things, done live, before you click "Create account"

01

Analyse

The moment a sign-up form shows a password field and a Terms/Privacy link, Guardian reads both documents on the spot and surfaces only what could actually disadvantage you — nothing you'd expect, nothing padded out to look thorough.

"ElevenLabs receives permanent, irrevocable rights to reuse and publish your content and voice for product development."
02

Protect

Cookie banners get the same treatment: reject everything non-essential automatically, open the preference panel when there's no direct "reject all," and verify the setting actually took before telling you it's done.

Necessary ✓ · Analytics ✕ · Advertising ✕ · Personalisation ✕
03

Find Better

If the verdict is "consider alternatives," Guardian identifies what the service actually does and names real competitors that handle your data better — never invented, never padded with a company that doesn't exist.

Obsidian — 96/100 · Anytype — 94/100 · AppFlowy — 91/100
3.0 — Exhibit A

Recorded live on Grammarly's real sign-up page

No staged mockup — this is the actual extension, on the actual Grammarly sign-up form, reading the actual linked policies while you watch.

Privacy & Terms Guardian reviewing Grammarly's sign-up terms live, then suggesting privacy-first alternatives

privacy-guardian-demo.gif — unedited capture, September 2026

4.0 — Prior art

Reviewed against what's already out there

AI summarizers like Simple Terms and SimpliTerms, the volunteer-curated Terms of Service; Didn't Read database, cookie-consent automators like Consent-O-Matic, and fixed-list redirect tools like Privacy Redirect each cover one slice of this. None do all of it, and none do it quite this way.

When it fires
themYou click the icon, on a page you're already reading.
usFires itself the moment a real sign-up moment appears — a password field, a submit button, or a checkbox beside a Terms link.
Data source
themToS;DR depends on a volunteer having already reviewed the exact site — nothing for a new or private app.
usReads the actual current document live, every time, so it works on a beta that launched yesterday.
Length
them100–300 word summaries.
usA capped, worst-first, plain-English list. No quoted clauses — if it's another wall of text, nobody reads that either.
Scope
themA summarizer, or a cookie-blocker, or a redirector — pick one.
usAnalyse, Protect, and Find Better, in sequence, in one extension.
Cross-domain signups
themWhatever single page you happen to be on.
usFollows identity-provider hops (Tinkercad → accounts.autodesk.com) and falls back to the site's real root domain.
Find Better
themA fixed list of known alternatives, or nothing.
usGrounded in the page's real content, names only real companies, and says "not enough information" rather than inventing one.

Compared against Simple Terms, SimpliTerms, T&C Reader, Polirizer, tosdr.org, Consent-O-Matic, and Privacy Redirect — September 2026.

5.0 — Under the hood

Built on GPT-6 Astra — but not for every click

The extension never holds the API key. It talks to a small backend, which is the only thing that ever calls Astra — for reading policies, resolving contradictions between sections, and identifying real alternatives. Known cookie-consent platforms are handled with deterministic rules; Astra is reserved for judgment calls, not busywork.

Chrome Extension → https → Backend API → Responses API → GPT-6 Astra

The backend runs on Render's free tier, which sleeps after 15 minutes idle — the first request after a quiet spell can take up to 50 seconds to wake it back up. Every request after that is fast; this is a hosting-tier tradeoff, not the extension being slow.

Every action is validated before it runs — the extension refuses to touch password fields, submit buttons, or forms outside a cookie-consent dialog, regardless of what a model proposes.