Privacy Policy

Extension: Splunk Natural Language
Last updated: May 2026

Overview

Splunk Natural Language is a Chrome extension that translates Splunk SPL queries to and from plain English using a locally-running AI model (Ollama or Docker Model Runner) or the Google Gemini API. This policy explains what data the extension handles and how.

Data collected and stored

The extension stores the following settings locally in your browser using chrome.storage.sync:

• Your chosen AI provider (Ollama, Docker Model Runner, or Google Gemini Flash)
• The API endpoint URL for local providers
• The selected model name
• Your Google Gemini API key (if you choose that provider)
• A custom system prompt (if configured)

These values are synced to your Google account via Chrome Sync if you have that enabled. No other data is stored.

Data sent to third parties

The extension sends data only to the AI provider you explicitly configure:

• Ollama / Docker Model Runner: SPL queries and natural-language text are sent to a server running on your own machine (localhost / 127.0.0.1). No data leaves your device.
• Google Gemini Flash: SPL queries and natural-language text are sent to the Google Gemini API (generativelanguage.googleapis.com) using the API key you provide. Google's own privacy policy applies to data processed by that API.

No data is sent to the extension developer or any other third party.

Permissions

• storage – to save your settings locally.
• host permissions for splunk-operations.ocset.net – to inject the natural-language UI into Splunk search pages.
• host permissions for local AI endpoints and generativelanguage.googleapis.com – to call the configured AI provider.

Children's privacy

This extension is not directed at children and does not knowingly collect data from anyone under 13.

Changes to this policy

If the extension's data practices change materially, this page will be updated and the "Last updated" date revised.

Contact

Questions about this policy can be raised via the GitHub issues page.