Privacy

Draft Sidenotes Privacy Policy

effective · April 15, 2026 product · /work/draft-sidenotes contact · hello@brewlab.dev

Placeholder — replace with the legal-final copy before submitting to the Chrome Web Store.

What Draft Sidenotes collects

Draft Sidenotes is a local-first Chrome extension. Every note, tag, and collection you create is stored in your browser’s IndexedDB. We operate no servers that receive this data by default.

Optional sync

If you enable end-to-end encrypted sync (off by default), notes are encrypted on your device before leaving it and stored in our sync service using a key only you hold. We cannot read synced content.

What Draft does not collect

  • Your identity, email, or any account information beyond what’s required for optional sync.
  • Page contents of sites you visit.
  • Browsing history.
  • Analytics or telemetry.

Permissions we request

  • activeTab — to read the paragraph you select when creating a note. Only active when you invoke Draft.
  • storage — to persist notes in your browser’s IndexedDB.
  • scripting — to inject the side-gutter UI on pages where you’ve created notes. Never active on sites you blocklist.

Third parties

Draft Sidenotes uses no third-party SDKs, analytics, or advertising. The optional sync backend is operated by BrewLab and uses Cloudflare Workers + R2.

Your rights

  • Export all your notes as Markdown at any time.
  • Wipe local storage via the extension settings.
  • Delete your sync account (and all encrypted payloads) via settings > sync > delete my sync data.

Contact

Questions? Email hello@brewlab.dev with the subject [Privacy] Draft Sidenotes.