Privacy Policy for Thoughtpad

Last Updated: January 19, 2025

Overview

Thoughtpad is a browser extension that allows users to highlight and annotate web content. This privacy policy explains how we collect, use, and protect your data.

Data Collection

Information We Collect:

• Account Information: Email address and encrypted password for authentication
• Annotations: Text you select from web pages and notes you create
• Webpage Information: URLs and titles of pages you annotate
• Authentication Tokens: JWT tokens stored locally in your browser

Information We DO NOT Collect:

• We do not track your browsing history
• We do not collect data from pages you don't annotate
• We do not sell or share your data with third parties
• We do not use cookies or analytics trackers

How We Use Your Data

Your data is used solely to:

• Authenticate your account
• Store and retrieve your annotations
• Display your annotations across devices (when logged in)

Data Storage

• Local Storage: Authentication tokens are stored locally in your browser using Chrome's storage API
• Server Storage: Your email, encrypted password, and annotations are stored securely on our servers
• Encryption: Passwords are hashed using bcrypt; data transmission uses HTTPS

Data Security

We implement industry-standard security measures:

• Passwords are hashed and never stored in plain text
• API communications use HTTPS encryption
• JWT tokens expire after 24 hours
• No third-party access to your data

Your Rights

You have the right to:

• Access your data at any time through the extension
• Delete your account and all associated data (contact us)
• Export your annotations (future feature)

Data Retention

• Your data is retained as long as your account is active
• You may request account deletion at any time
• Deleted data is permanently removed from our servers

Third-Party Services

Thoughtpad does not integrate with or share data with any third-party services.

Children's Privacy

Thoughtpad is not intended for users under 13 years of age. We do not knowingly collect data from children.

Changes to This Policy

We may update this privacy policy from time to time. Continued use of Thoughtpad after changes constitutes acceptance of the updated policy.

Contact

For questions or data deletion requests, contact: chrisbugs04@gmail.com

Permissions Explanation

Thoughtpad requests the following Chrome permissions:

• storage: To save your authentication token locally
• activeTab: To access the current tab's URL and title when you create an annotation
• host_permissions: To communicate with our API server for saving/retrieving annotations