Privacy

Plain-language summary for SHEHZADA'S FLOW. Last updated: 5 November 2026

Last updated: 5 November 2026. The information below describes the released v0.17.6 extension. The service is independently operated and is not affiliated with Google.

This website

The website has no login, payment form or analytics. It loads fonts from Google Fonts, so your browser contacts Google when you open a page. GitHub and Discord are separate services with their own policies.

Account and quota (Supabase)

Sign-up and login use Supabase. Your registration email, an account identifier and sign-in session information are processed so you can use your account. The service records how many image prompts you submit each UTC day and your Pro status, to enforce the daily limit.

For questions about account information and deletion requests, contact us privately through Discord support (username shehzada). The extension does not provide an automated account-deletion button. Retention depends on the service setup and the hosting provider; request details before providing information you do not wish to retain.

Browser permissions

The extension uses powerful Chrome permissions. Its declared permissions are sidePanel, tabs, storage, downloads, debugger, and scripting. The debugger permission enables browser-level mouse and keyboard interactions in the Google Flow tab and may display a significant Chrome permission warning. It requires host permissions for flow.google.com, the project's account-service domain, and the public release-information website. These are declared at installation/update time, not requested individually during sign-in. Chrome may disclose these permissions.

What stays on your device and what is sent

The extension works on your own signed-in Google Flow page. It is not designed to collect your Google password. Prompt queues, settings, and download/recovery status are stored locally in your Chrome extension storage so they can resume. Sign-in session data is stored in Chrome session storage. Password recovery requests send only the supplied account email to the authentication service, and recovery links use a first-party GitHub Pages page. Passwords and recovery tokens are never intentionally sent to the release website. The extension submits prompts to your own signed-in Google Flow tab. Its account-service requests transmit account information, subscription status checks, and quota claims (mode and a unique request ID), not the full prompt text. Google Flow itself handles submitted prompts and generated media under its own policies.

Software update checks

From v0.17, the extension checks a public version-information JSON file on this GitHub Pages site when its Account page or side panel opens, and periodically while open. The check does not contain your registered email, activation code or Google Flow prompts. The website host may receive ordinary connection information such as your IP address and browser headers. The extension never automatically installs software; any upgrade requires your own action.

Pro codes and payment

Payments happen outside this website through Discord. Do not post payment details publicly. Pro codes are single-use and redeemed inside the extension.

Your responsibilities

Follow Google Flow’s terms and content policies. SHEHZADA'S FLOW is not affiliated with Google.