Privacy Policy

How LCSH Tools handles your data — built on a local-first, zero-knowledge architecture.

Effective Date: February 27, 2026 · Last Updated: February 27, 2026

1. Introduction

This privacy policy applies to the LCSH Cataloging Assistant Progressive Web App (PWA), the LCSH Recommendation Tool Chrome Extension, and the Cataloger MCP Server (collectively, "LCSH Tools").

All LCSH Tools are designed with a local-first, zero-knowledge architecture. Your data stays on your device unless you explicitly send it to a third-party AI provider or the Library of Congress API. We do not operate backend servers for data collection or storage.

2. Information We Collect

Information You Provide

  • AI provider API keys (e.g., OpenAI, Google Gemini, OpenRouter, DeepSeek, or custom endpoints)
  • Bibliographic data you enter (titles, authors, abstracts, tables of contents, notes)
  • Images you upload (PNG, JPEG) for multimodal analysis
  • Custom system prompt rules you configure

Automatically Generated

  • Cataloging session history (stored locally on your device)
  • AI-generated LCSH recommendations and MARC records
  • LOC validation results and similarity scores

Information We Do NOT Collect

  • We do not collect analytics, telemetry, or usage data
  • We do not track your browsing history
  • We do not store any data on our servers
  • We do not use cookies for tracking purposes
  • Image data is not retained in session history — only file metadata (name, type, size)

3. How We Use Your Information

Your data is processed exclusively to:

  • Generate AI-powered LCSH and LCNAF subject heading recommendations
  • Validate terms against the Library of Congress authorities API
  • Generate MARC records (fields 650, 600, 610) for validated headings
  • Calculate similarity scores between suggested and validated terms
  • Maintain local session history for your reference

4. Data Storage & Security

Local Storage Only

All user data is stored locally on your device:

  • Cataloging Assistant (PWA): Browser localStorage via Zustand state management
  • Chrome Extension: Chrome Storage API (chrome.storage.local)
  • MCP Server: Runs locally on your machine; no data persisted between sessions

We do not operate any backend servers for data storage. The Tools run entirely on your device.

API Key Security

  • API keys are stored locally in your browser's storage
  • Keys are transmitted only to the AI provider you select, over HTTPS
  • Keys are never sent to our infrastructure (we have none)
  • You can remove stored keys at any time through the Settings page

5. Third-Party Services

When you use LCSH Tools, data is sent to third-party services based on your configuration:

AI Providers (Your Choice)

Bibliographic information and images are sent to whichever AI provider you configure (e.g., OpenAI, Google Gemini, DeepSeek, OpenRouter, Qwen, or a custom endpoint). Each provider has its own privacy policy governing how it processes your data. We encourage you to review the privacy policy of your chosen provider.

Library of Congress

Search queries are sent to id.loc.gov to validate LCSH and LCNAF terms. This is a public United States government service. No personal information is included in these requests — only subject heading search terms.

6. Your Rights & Controls

You have full control over your data:

  • View: All stored data is accessible through the Tools' interface
  • Delete: Clear individual sessions or all history at any time
  • Remove API keys: Delete stored keys through Settings
  • Export: Download your recommendations as CSV before deleting
  • Uninstall: Removing the PWA or Chrome Extension deletes all associated local data

7. Children's Privacy

LCSH Tools are professional cataloging aids not directed at children under 13. We do not knowingly collect information from children. If you believe a child has provided data through the Tools, please contact us so we can assist with removal.

8. Data Retention

All data is stored locally on your device and retained only as long as you choose to keep it. There is no server-side retention. Clearing your browser data or uninstalling the Tools removes all stored information.

9. International Users

Because all data processing occurs locally in your browser, your data does not cross borders through our infrastructure. However, when you use a third-party AI provider, your bibliographic data is transmitted to that provider's servers, which may be located in a different jurisdiction. Please review your chosen provider's data processing policies.

10. Regulatory Compliance

  • GDPR: No personal data is collected or processed by us. All data remains on your device.
  • CCPA: We do not sell personal information. We do not collect personal information for commercial purposes.
  • COPPA: The Tools are not directed at children under 13.

11. Changes to This Policy

We may update this privacy policy to reflect changes in the Tools or applicable regulations. Significant changes will be noted by updating the "Last Updated" date at the top of this page.

12. Contact

For privacy-related questions or concerns, please contact us at extensions@098484.xyz.

13. Consent

By using the LCSH Cataloging Assistant, the LCSH Recommendation Tool Chrome Extension, or the Cataloger MCP Server, you consent to this privacy policy.

This policy covers the LCSH Cataloging Assistant PWA, the LCSH Recommendation Tool Chrome Extension (v1.1.0+), and the Cataloger MCP Server.