Effective Date: July 28, 2026

Privacy Policy

WebStickly was built on a single promise: your notes never leave your device. No servers. No tracking. No compromises.

🔐

Zero Data Guarantee

WebStickly collects zero personal data. Notes, URLs, and preferences are stored only in your browser — never transmitted, never logged, never sold.

1. Information Collection and Use

WebStickly operates on a local-first privacy model. Here is an exhaustive list of what we collect:

∅ Absolutely nothing.

We do not collect, transmit, or process any personally identifiable information, browsing history, keystroke data, or analytics of any kind. No account creation is required to use WebStickly.

2. Local Storage Model

All data created by WebStickly is stored exclusively inside your browser using Chrome's built-in chrome.storage.local API:

Note content — The text you type into each sticky note
Note metadata — Position (x/y), size, color, minimized state
Page binding — The URL each note is pinned to (stored locally only)
User profile — Display name and initials you set in the extension popup

This data lives entirely within your browser's sandboxed storage. Uninstalling WebStickly removes all data permanently.

3. AES-GCM Encryption for Exports

When you use the "Backup All" export feature, your notes are exported as a .ws.json file that is encrypted locally using industry-standard:

Encryption Algorithm

AES-GCM · 256-bit key

Executed entirely in your browser via the Web Crypto API. No key is ever transmitted.

Exported backup files remain under your sole control on your device. We have no remote access and cannot decrypt your data.

4. Permissions Required

WebStickly requests only the minimum permissions necessary to function. Here is what each permission does:

storage

Stores your sticky notes, positions, colors, and profile locally in chrome.storage.local. This data never leaves your device.

activeTab

Allows WebStickly to inject note UI onto the webpage you are currently viewing — only when you actively trigger it via Alt + N.

tabs

Used to read the current tab's URL to correctly bind and retrieve notes for each unique webpage.

5. Third-Party Services

WebStickly version 1.0.0 does not integrate with any third-party services. This includes:

No analytics platforms (Google Analytics, Mixpanel, etc.)
No advertising networks
No crash reporting services
No external API calls of any kind

6. Changes to This Privacy Policy

We may update this Privacy Policy as WebStickly evolves. Any changes will be reflected on this page with an updated Effective Date. We will not retroactively reduce user privacy protections without explicit notice.

7. Contact

Have questions about this Privacy Policy? Reach out via email:

karaleutkarsh3696@gmail.com