Privacy policy

Your account. Your email address, name, and username, plus the bio and website you add to your profile. If you set a password, we store only a scrypt hash of it, never the password itself. If you sign in with GitHub or Google, we also store that account's ID and your profile picture link.

What you save. The extension reads a page only after you start a capture on it. Depending on how you capture, we store:

• Screenshots of the page, an area of it, or an element on it
• The original SVG, image, or video file of an element you pick, or of an image, video, or link you save from the right-click menu
• The page's address, title, description, site name, and links to its icon and preview image
• The main colors in the capture and the names of fonts the page uses
• The notes, tags, and collections you add

Sign-in and security. A session cookie keeps you signed in. We record sign-in attempts (email, IP address, and whether they succeeded) to block password guessing, and regularly delete records older than 30 days.

On your device. The extension keeps its access key and settings, such as the floating button's position and the sites where you hid it, in Chrome's extension storage.

• It doesn't collect your browsing history or the pages you visit.
• It doesn't read or send page content until you save something.
• If you turn on the optional floating button, Chrome asks for access to all sites. The extension uses it only to show the button and to capture when you ask.
• On the Maggpie website, a small script tells the web app which extension version you have, so it can offer updates.
• It doesn't include ads, analytics, or third-party trackers.

We use your information to run Maggpie: to store and show your library, sync it between the extension and the web app, keep your account secure, and respond when you contact us. We don't sell your information, use it for advertising, or use it to decide creditworthiness or for lending. Maggpie's use of data follows the Chrome Web Store User Data Policy, including its Limited Use requirements.

Your library is private by default. If you set a collection to Public, anyone with its link can view its saves, even without an account, and people signed in to Maggpie can browse it in Explore. Notes, tags, and your other collections stay private. Public pages ask search engines not to list them.

Your profile is public. Your name, username, profile picture, bio, website, and public collections appear on your profile page at /@username. Your email address never does.

Service providers. We rely on a few companies to run Maggpie, and they process data only on our behalf: Vercel hosts the web app and stores your files, and Neon hosts the database.

Links you save. To build previews, our server downloads the preview images and media files from the links you save. Those websites see a request from our server, not from you.

The law. We may disclose information if the law requires it, or to protect the safety and rights of our users and Maggpie.

We keep your library until you delete it. Deleting a save removes its files. You can delete your whole account from Account → Danger zone, which deletes your saves, collections, files, and profile. If an admin removes your account, the same data is deleted. To get a copy of your data, contact us.

You can view, edit, and delete your saves at any time. You can also ask us to access, correct, export, or delete your information. If you're in the European Economic Area or the UK, you have these rights under the GDPR, and you can complain to your local data protection authority. We process your information to provide the service you signed up for, and, for security measures like sign-in throttling, based on our legitimate interest in keeping accounts safe.

Our providers may process your information in the United States and other countries where they operate. When data leaves the EEA or UK, we rely on our providers' safeguards for international transfers.

Connections to Maggpie use HTTPS. Passwords are hashed, and your files are stored privately and are only served to signed-in people allowed to see them. No system is perfectly secure, so please use a strong, unique password.

Maggpie isn't meant for anyone under 16, and we don't knowingly collect their data.

If we change this policy, we'll update the date at the top. For significant changes, we'll let you know in the app before they take effect.

Questions or requests about your privacy: the developer email listed on Maggpie's Chrome Web Store page.