Privacy policy
Draft — needs a legal read before it ships
The facts below were taken from the extension's source and are accurate. The parts a lawyer has to settle — who the controller is, which supervisory authority applies, retention periods — are marked [TO FILL].
Last updated: [TO FILL]
Controller: [TO FILL — legal entity, address, email]
The short version
The extension stores your workspaces in your own browser profile and has no permission to read the websites you visit. It reads the address of the tab you are on at the moment you open the popup, and that address is never sent anywhere. There is no account, and no server of ours to hold one.
What the extension stores
| What | Where | Why |
|---|---|---|
| Your workspaces | Chrome's synced extension storage, compressed under a single key | So they follow your browser profile between your own machines. Chrome replicates this, not us — we never receive it. |
| Theme choice | Chrome's synced extension storage | To keep the interface in the mode you picked. |
| Onboarding state | Chrome's local extension storage | Machine state — which version's changelog you have seen. |
What the extension reads
The extension requests storage,
activeTab and scripting, and
no host permissions. In practice:
- It reads the address of the active tab at the moment you click the extension icon. It is used to work out which links to offer and is not transmitted or stored.
-
If, and only if, one of your own workspaces asks it to, it reads
link addresses from the page you are on — that is the
domPatternfeature. It runs on the click that opens the popup, on that one tab, and the value stays on your machine. - It does not read your browsing history, and cannot.
This website
This site counts page views with Umami, which we run on our own server in Nuremberg, Germany. There is no Google Analytics, no tag manager and no advertising pixel. The counting script is served from this domain, so no third party sees your request and none receives the result.
Nothing is written to your device, which is why you
were still not asked to accept anything. The script reads one value,
a umami.disabled key in localStorage, and
only to check whether you have switched the counting off yourself. It
never writes it.
Each page view records:
- the path you opened, and its query string if it had one
- the page that linked you here, and the page title
- your browser, operating system, device type, screen size and language
- the country your IP address maps to. The same lookup can also yield a region and a city; ours resolves neither, and both are empty for every visit so far
Your IP address itself is not stored. It is used to look up that location and to derive an identifier so that opening a second page is not counted as a second person, and then it is gone. There is no column for it in the database, and none for your browser user-agent string either.
Nothing here is used to follow you to another website, and it is never combined with any other data. The legal basis is our legitimate interest in knowing which pages get read, under Art. 6 (1) (f) GDPR. Rows older than 12 months are deleted every night.
To switch it off for yourself, open your browser's
developer console on this site and run
localStorage.setItem('umami.disabled', 1). That browser
will stop sending anything. You may also object to the processing, ask
what is held about you, or complain to a data-protection supervisory
authority.
The only thing the site keeps in your browser is your light or dark
theme choice, in localStorage. It never leaves your
browser.
The site is served from Amazon CloudFront, which processes request logs including IP addresses as part of delivering it. [TO FILL — retention, and whether logging is on.]
Nothing on this site is loaded from anybody else. The fonts are served from here, the product demo on the home page is drawn by the page itself, and there is no embedded video, player or widget — so reading the site sends no request to a third party at all.
The uninstall survey
If you remove the extension, a page opens asking why. Answering is optional and so is every field on it. It records the reasons you ticked, anything you typed, the version you had, and an email address only if you choose to leave one — the form offers it so we can reply, and nothing on the page requires it. Leave it blank and the submission carries nothing that identifies you: no user id, no account, no record of what you browsed. If you do leave an address we use it to answer you and for nothing else. [TO FILL — how long feedback is kept.]
Your rights
Under the GDPR you can ask what we hold about you, have it corrected or deleted, object to processing, and complain to a supervisory authority. In practice, if you have never bought a plan we hold nothing about you at all — deleting your workspaces is a matter of removing the extension.
[TO FILL — contact address for requests, supervisory authority.]
Changes
If this policy changes in a way that matters, the date at the top changes with it.