Prominent disclosure: Higgsfield Automation handles only the data needed to sign you in to the extension,
run the prompts you provide on higgsfield.ai, remember your local settings, and download generated results. It does not
use analytics, advertising SDKs, tracking pixels, or third-party tracking.
1. What this extension does
Higgsfield Automation is a Chrome extension that automates bulk image and video generation on
higgsfield.ai. It lets you enter prompts,
import prompt files, optionally add reference images, run those prompts through the Higgsfield page in your browser,
and download finished images or videos to your computer.
2. User data collected or handled
Data category
What is collected or handled
How it is used
Where it is stored
Who receives it
Authentication information
Email address, Firebase user ID, Firebase ID token, email verification state, and, for Google sign-in, the basic Google profile returned by Google. For email/password sign-up, Firebase stores the password hash; the extension developer never sees the plaintext password.
Used only to let you sign in to the extension, keep your extension session active, verify email status, and identify the same extension user across sessions.
Google Firebase Authentication servers and browser IndexedDB used by the Firebase Web Extension SDK.
Google Firebase Authentication and Google OAuth services.
Personally identifiable information
Email address and, when Google sign-in is used, display name and profile picture URL returned by Google.
Used only for extension sign-in and showing the signed-in account in the side panel.
Google Firebase Authentication servers and browser IndexedDB.
Google Firebase Authentication and Google OAuth services.
User-provided content and website content
Prompts typed into the side panel, prompts imported from TXT/CSV/XLS/XLSX files, optional reference images selected by the user, filenames, generated media URLs, and generated images/videos returned by higgsfield.ai.
Used only to submit the requested generation jobs to higgsfield.ai, monitor job progress, match outputs to prompts, and download the resulting files.
Prompt text and imported file contents are held in the extension UI memory while you use the side panel. Active queue/progress data is held in memory. Downloaded files are stored in your Chrome Downloads folder. Selected reference images are represented as browser object URLs during the current session.
higgsfield.ai receives prompts and uploaded reference images when you click Run. Generated media is downloaded from higgsfield.ai or its media/CDN hosts through your browser session.
Used to remember your preferences, resume normal extension behavior between browser sessions, and keep the automation compatible with the Higgsfield page.
Chrome storage on your device, primarily chrome.storage.local. The remote selector JSON cache contains no personal information.
Not sent to the extension developer. The selector configuration request goes to the extension's Cloudflare Pages endpoint and does not include personal data.
3. Data not collected
The extension does not collect general browsing history.
The extension does not track websites outside higgsfield.ai.
The extension does not use analytics, telemetry, advertising SDKs, or third-party tracking.
The extension does not store, request, or transmit your higgsfield.ai login credentials.
The extension does not log your prompts, settings, generated files, or downloads to a developer-operated analytics service.
The extension does not collect location, health, or personal communications data.
4. How data is collected
Extension sign-in: you enter an email/password or start Google sign-in. Authentication is handled by Google Firebase Authentication and Google OAuth.
Prompt entry and import: you type prompts or select a TXT/CSV/XLS/XLSX file. The extension reads that file locally in the browser to extract prompt text.
Reference images: you select local image files when using modes that need images. The extension uses those files only for the generation workflow you start.
Higgsfield automation: when you click Run, the extension sends your selected prompts and images to the higgsfield.ai page in your browser, using your existing Higgsfield session.
Settings: when you change extension settings, they are saved in Chrome storage on your device.
5. User consent
The extension handles data only after a user takes an action that starts that handling: signing in, importing
a prompt file, selecting reference images, changing settings, or clicking Run. Users can choose not to sign in,
not to import files, not to select images, or not to run a queue. Removing the extension stops further data handling
by the extension.
6. How data is used and handled
Authentication data is used only to sign in to the extension and keep that extension session active.
Prompts, imported prompt files, and reference images are used only to perform the Higgsfield generation workflow you request.
Generated media URLs are used only to detect completed Higgsfield outputs and download those files.
Download folder and filename preferences are used only to save generated outputs in Chrome Downloads.
Settings and cached selector configuration are used only to operate the extension and keep the page automation working.
7. Storage and retention
Firebase Authentication: Firebase stores authentication records for as long as the extension developer keeps the Firebase user account, unless deleted earlier.
Browser IndexedDB: Firebase stores a local sign-in session in your browser so you do not have to sign in every time.
Chrome storage: extension settings, interface language, welcome preference, and selector cache stay on your device until you reset settings, clear extension data, or uninstall the extension.
Prompt queue and logs: active prompt queue status and action logs are kept in extension memory while the side panel/session is active and are cleared when the extension context is closed or when you clear them in the UI.
Downloads: generated images and videos are saved to your local Downloads folder and remain there until you delete them.
8. Sharing and disclosure
The extension shares user data only as needed to provide its stated functionality:
Google Firebase Authentication and Google OAuth: receive authentication information when you sign in, sign up, sign out, verify email, or refresh your session.
higgsfield.ai: receives the prompts and reference images you choose to run, and returns generated media, because that is the generation workflow requested by the user.
Cloudflare Pages endpoint operated for the extension: receives a request for selector configuration. This request does not include prompts, images, generated media, email address, Firebase user ID, Higgsfield credentials, or browsing history.
The extension does not provide user data to advertising networks, data brokers, analytics providers, or unrelated third parties.
9. Network requests the extension makes
Requests to higgsfield.ai and its media hosts, driven by your existing Higgsfield browser session and the settings selected on the page.
Requests to Google Firebase Authentication and Google OAuth hosts, including identitytoolkit.googleapis.com, securetoken.googleapis.com, www.googleapis.com, accounts.google.com, and Firebase app domains, only for sign-in and session management.
Requests to higgsfield-automation.pages.dev to fetch selector configuration and public support pages. Selector requests send no personal data.
10. Security
All network requests made by the extension use HTTPS.
The extension does not send user data through non-secure HTTP.
The extension does not place prompts, authentication tokens, or user identifiers in URL query strings for developer-operated endpoints.
The extension does not execute remote code. Remote selector configuration is JSON data, not executable JavaScript.
11. User control and deletion
You can sign out of the extension from the side panel to clear the active Firebase session from the extension UI.
You can reset extension settings from the Settings tab.
You can remove local extension data by removing the extension from Chrome or clearing extension site data in Chrome.
You can delete downloaded files from your Downloads folder at any time.
For deletion of Firebase Authentication records associated with your extension sign-in, contact the developer at the email below.
12. Children
The extension is intended for users 18 and older. It does not knowingly collect data from children.
13. Changes to this policy
If this policy changes, the updated version will be posted at this same URL with a new "Last updated" date.