Here is, in plain words, what Henkan Variant sends, where it goes and what it keeps. The legal reference is the privacy policy.
The extension only acts when you ask#
The extension contains no advertising and does not track your browsing. It does nothing on a page until you open the side panel and make a request.
What is sent when you make a request#
The extension processes the following only when you make a request in the side panel:
- the URL and title of the current page;
- a description of its visual design: CSS variables, fonts, colours, the structure of the visible page and the HTML of the elements you selected;
- a screenshot of the visible tab;
- your request, typed or dictated;
- any mockup images you attach.
Where it goes#
| Data | Sent to | When |
|---|---|---|
| Your request and its context | Anthropic's Claude models: through the Henkan Variant app and its AI gateway (personal token), or directly to Anthropic's API (your own API key) | Every request |
| Screenshot of the selected area and the description of the change | OpenAI, Henkan's provider for Ideas mode visuals | Only when you ask for ideas with visuals |
| The screen shown in the Studio, your marks, references and request | OpenAI, through Henkan's AI gateway | Only when you generate a version in the Studio |
| The address of a site added as a Studio reference | Henkan's server reads that public page; Anthropic's Claude models describe its style (with a web search if the site cannot be read) | Only when you add a site link, or write an address in the Studio request |
| An editable copy of the page (its HTML and styles, fonts and icons, at the top of the page, form fields masked) | Henkan Variant app (private storage of your workspace) | After each step saved in the app (extension 0.10.0 or later) |
| A request made in the Studio's Build side, with the design of the copy of the page (styles, structure, the elements you attached) and the After screenshot | Anthropic's Claude models, through Henkan's AI gateway | Only when you apply a request there |
| Web search queries | Anthropic | When Claude searches the web for ideas |
| Voice | Chrome's built-in speech recognition | Only while the microphone button is active |
| Figma frame request | Figma's API, with your own Figma token | Only if you paste a Figma link |
What the web app stores#
With a personal token, your workspace keeps your variants, conversations, generated code and before/after screenshots, so your team can find them again. The app is hosted on Lovable Cloud.
- Screenshots. Stored privately and shown only to members of your workspace, through temporary links.
- Editable copy of the page. Used by Build in the Studio and stored the same way, only the latest one per variant. It is shown in an isolated frame that cannot run the site's scripts or reach your account.
Data is kept while the workspace exists. To delete variants or your account, write to alex@henkanpartners.com.
Settings in your browser#
The extension's settings (API key, token and preferences) are stored locally in your browser. They are never sent to Henkan, except the personal token, which authenticates the extension to the app.
Tokens and access#
- Tokens are shown once. Henkan stores only a one-way fingerprint (SHA-256) of each token, so a token cannot be displayed again after creation.
- Revocation is immediate. A revoked token stops working on the next request and cannot be reactivated.
- Access is checked on every request. The app refuses a token whose account no longer has access to Henkan Variant, or whose owner has left the workspace.
- Your team only. Variants, ideas and notes are visible only to members of the workspace.
Account activity#
To manage access and support the client relationship, Henkan records for client accounts:
- Sign-ins. Sign-in times and approximate location (country and city, derived from the IP address).
- Devices. Browser and device type.
- Features. Which product features are used.
- AI usage. For each AI request (Studio, extension, images), the model used, the number of tokens or images and the workspace, to follow the cost of AI. Never the page, the prompt or the code.
Henkan keeps this data in Henkan Account and never sells it.
The web app uses Google Analytics only if you accept it in the cookie banner. Your choice is shared across henkanpartners.ai and its tools. To change it, delete the hp_consent cookie and site data: the banner then asks again.
Your responsibilities#
- Use Henkan Variant only on websites you are authorised to modify or test.
- Review generated code before it reaches your visitors. It is provided as is.
- Keep your password and personal tokens private, and revoke any token you think is compromised.
Your rights#
Under the GDPR you have rights of access, rectification, deletion and objection regarding your personal data. To exercise them, contact alex@henkanpartners.com. Henkan Variant is published by Kandly SAS (Henkan & Partners).