Privacy Policy

MarkPad Chrome Extension  ·  Last updated: May 2026

Overview

MarkPad is a local-only browser extension. It does not transmit, upload, or share any personal data with any external server, service, or third party. All data created or processed by the extension stays on your device.

What data is stored

The extension stores the following data in Chrome's localStorage inside the extension's own isolated origin (chrome-extension://<id>):

• Bookmarks — titles, URLs, descriptions, tags, visit counts, and folder assignments you create or import from Chrome.
• Folders — folder names and colour preferences.
• Quick Apps — your customised shortcut-bar entries.
• Sessions — named tab-session snapshots you explicitly save.
• Notes — rich-text notes and their canvas positions.
• Link-check cache — per-URL status results (ok / broken / timeout) cached for 24 hours.
• UI preferences — dark/light mode, view (grid/list), sort order.

This data never leaves your browser.

Permissions and why they are used

Permission	Purpose
bookmarks	Read and write Chrome's bookmark tree to keep MarkPad in sync with your existing bookmarks. No bookmark data is sent anywhere.
tabs	Read the list of open tabs in the current window when you click "Save Session". Tab URLs and titles are stored locally only.
<all_urls> (host permission)	Required by the link health checker to issue HTTP HEAD requests to arbitrary URLs in your bookmark list, to determine whether each link is alive or broken. These requests carry no identifying information.

Third-party network requests

The only outbound requests made by the extension are:

• Favicon fetches — GET https://www.google.com/s2/favicons?domain=<hostname> to display site icons. The hostname is derived from your bookmarked URL. No personal data is sent.
• Link health checks — HTTP HEAD (or no-cors GET) requests to each bookmarked URL to test whether the link is still alive. These are plain network probes with no cookies, credentials, or identifying headers added by the extension.

Code execution sandbox

The "Run" button inside notes executes JavaScript in an isolated <iframe sandbox> page bundled with the extension. The sandbox has no network access and no access to the parent window or any browser data. Code you run stays inside that sandboxed context.

Data sharing

MarkPad does not:

• Send data to any analytics service.
• Display advertisements.
• Require a user account or sign-in.
• Sync data to the cloud.
• Share data with the extension developer or any third party.

Data deletion

Uninstalling MarkPad removes all locally stored data along with the extension. You can also clear extension data at any time via chrome://settings/siteData → search for the extension ID.

Children's privacy

This extension does not knowingly collect information from children under 13. It collects no personal information from any user.

Changes to this policy

If the privacy practices of this extension change materially, this page will be updated and the version number in the extension manifest will be incremented.

Contact

Questions or concerns about this privacy policy can be raised via the extension's GitHub issue tracker.

---

MarkPad v2.0.0  ·  All data stored locally on your device.